Penetration Testing, Network Attacks & Social Engineering

This unit dives into the practical side of security testing, comparing penetration testing with broader ethical hacking and walking through the recognized phases an attacker (or tester) moves through during an engagement. It covers common network reconnaissance techniques used to map out a target's infrastructure and identify open points of entry, along with the categories of weaknesses commonly found in network hardware, software, and configurations. Several types of spoofing and impersonation attacks are explained, showing how attackers manipulate network protocols to intercept or redirect traffic. The unit closes with an in-depth look at social engineering — the human-focused side of hacking — covering manipulation tactics, phishing, and physical methods used to gain unauthorized access. A well-rounded unit connecting technical exploitation with human-factor security risks.