Why bother with 0-days when a click will do?

Most real breaches start with a person, not an exploit — a convincing email, a fake login, a phone call with the right pretext. Social engineering weaponizes trust, authority and urgency. This course covers both sides: crafting the lure, and spotting/investigating it (which is what defenders and analysts actually get paid for).

🎯 Your artifacts

cat ~/socialeng/README.txt
ls -la ~/socialeng/           # phish.eml + clone/login.html

🎯 Challenge: Read the README. You have two artifacts from a real campaign — what does each one represent in the attack chain?

Show solution

phish.eml = the lure (the email that lands in the inbox). clone/login.html = the trap (the fake page that harvests credentials when the victim clicks the link). Lure → click → harvest.

⚖️ Phishing simulations require explicit written authorization. Never target people without it.

Liked it? 5 more lessons are waiting.

6 lessons · knowledge checks · final exam · verifiable certificate · in-browser Live-Lab

Unlock all courses · CHF 9/month Buy only this course · CHF 19

What's in Social Engineering & Phishing

1. The Human Is the Weakest LinkFree
2. The Psychology of Influence🔒 Foundations
3. Email Header Forensics🔒 Investigation
4. Cloned Pages & Credential Harvesting🔒 Attack
5. Building the Human Firewall🔒 Defense
6. Final Exam — Investigate the Campaign🔒 Certification

Continue in the interactive course reader →

The Human Is the Weakest Link

Why bother with 0-days when a click will do?

🎯 Your artifacts

Liked it? 5 more lessons are waiting.

What's in Social Engineering & Phishing