// category
Social Engineering
Writeups and tutorials filed under Social Engineering.
5 writeups in this category
Email Spoofing: Why It Still Works, and How SPF/DMARC/DKIM Stop It
// TL;DR Email spoofing — sending mail that appears to come from someone else’s address — is old, simple, and still everywhere, because the core email…
Facebook Apps: Phishing Under a Trusted Domain
// TL;DR Facebook keeps raising the bar on account security, but one avenue stayed open for a long time: third-party apps hosted inside Facebook’s own canvas.…
Tabnabbing in Action: A Facebook Example
// TL;DR Tabnabbing (tabnapping) is a sneaky phishing technique that takes advantage of browser tabs you’ve left open and stopped paying attention to. Here’s a concrete,…
What Is Tabnabbing?
// TL;DR Tabnabbing is a clever evolution of phishing that exploits something you do without thinking: leaving tabs open. A background tab quietly rewrites itself into…
What Is Phishing? How Phishing Attack Works
// TL;DR Phishing is a social-engineering attack that tricks people into handing over sensitive information — login credentials, card numbers, personal data — usually by impersonating…