<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
---
name: social-engineering
description: >-
  Social engineering assessment techniques including phishing simulations, pretexting, and awareness training.
domain: cybersecurity
subdomain: social-engineering
tags:
  - social-engineering
  - security
version: "1.0"
author: defconxt
license: AGPL-3.0
---

# social engineering

## Overview

Social engineering assessment techniques including phishing simulations, pretexting, and awareness training.

## When to Use

Activate this domain when tasks involve social engineering techniques, methodologies, or tools.

## Quick Reference

```bash
# List available techniques
ls skills/social-engineering/techniques/

# Run a specific technique agent
python3 skills/social-engineering/techniques/*/scripts/agent.js --help
```

## Capabilities

| Capability | Description |
|------------|-------------|
| Technique Assessment | Evaluate social engineering posture |
| Tool Integration | Leverage specialized social engineering tooling |
| Reporting | Generate structured findings |
| Automation | Script common social engineering workflows |

## Workflow

1. **Scope** — Define social engineering assessment boundaries
2. **Discover** — Identify targets and attack surface
3. **Assess** — Apply relevant techniques
4. **Document** — Record findings with evidence
5. **Report** — Generate actionable recommendations

## Techniques

See individual technique directories under `techniques/` for detailed implementations.

## References

- OWASP Testing Guide
- NIST SP 800-115 Technical Guide to Information Security Testing
- MITRE ATT&CK Framework
