Foundation. Identity shift. Remove limits. Listen. Before you learn a single trick, you have to change who you are. Most “social engineering” courses start with phishing templates. That’s like handing a baby a gun. We start with your mind. Here’s what you’ll discover in this module: What social engineering really is – (Hint: it’s not lying. It’s understanding trust.) Why humans are hackable – 7 brain shortcuts that make even smart people fall The 3 types of social engineers – good, bad, weaponized (you’re training to be the good one) Ethics & law – where the line is. Cross it? Jail. Respect it? Career. Attacker mindset vs defender mindset – think like water, then seal the cracks. Your first assignment: Write a 2‑page profile of yourself as a target. Your fears. Your habits. Your weak moments. Because if you don’t know how you can be hacked, you can’t protect anyone else. This is where your transformation begins.

Why people say YES – faster than they think. You’re about to learn why your brain says “yes” before your mouth opens. Cognitive biases – The mental shortcuts that bypass logic. 5 influence triggers – Scarcity, authority, fear, reward, belonging. Trust in seconds – How it’s built. How it’s broken. Emotional hijacking – When feelings run the show. Why smart people fall hardest – Intelligence doesn’t protect you. Arrogance does. The Lab: Break a stranger’s guard in under 3 minutes – using only conversation. (Ethically. No tricks. Just psychology.)

Weapons come later — intelligence wins first. Before you make a single phone call, before you send a single email… you listen. That’s OSINT. Open Source Intelligence. Finding what people already leaked online. Here’s what you’ll master: - OSINT workflow – footprint → map → profile (a system that works every time) - Email enumeration & social graph building – who knows whom, who trusts whom - Metadata extraction & pattern detection – the clues people leave without knowing - Deep persona mapping – not just names. Behaviours. Fears. Values. Routines. Assignment: Profile a real organization using public data only. No hacking. No calling. Just intelligence. Why this module is deadly (in the right hands): Most attackers rush in. The pros? They spend 80% of their time here. Because once you know everything about a target, the attack almost writes itself.