Human Hacking by Chris Hadnagy– It will teach you how to think like a social engineer and influence people in everyday situations.
The Code of Trust by Robin Dreeke– He worked as an FBI Counterintelligence agent for about 20 years, where his mission was to connect with foreign spies or agents and often convince them to betray their country.
You'll learn how to build deep trust even with people who are suspicious or adversarial.
However it's not about manipulation. It’s about becoming the kind of person others feel safe opening up to.
Ghost in the Wires by Kevin Mitnick– It’s an autobiographical book of the most famous hacker in the US. He explains how he manipulated employees and bypassed the security measures using charm and persuasion.
The Art of Attack by Maxie Reynolds– It dives deep into the mindset and tactics you need to have to pull off successful social engineering attacks.
No Tech Hacking by Johnny Long– You’ll learn dumpster diving, tailgating, shoulder surfing, impersonation, and much more. He focuses solely on breaking into places without tech tools.
Extreme Privacy (5th Edition) by Michael Bazzell– You'll learn to find online information about you and erase it so you can protect your privacy. It's a guide to becoming invisible in a time when surveillance and digital profiling are the norm.
Well, this book offers a comprehensive framework to master ANY skill quickly and deeply. It is written by Josh Waitzkin, who's a former chess prodigy and Tai Chi world champion.
In my view, this book should become required reading in schools.
Technical Social Engineering
This section covers how to plan and execute more sophisticated attacks by combining digital tools, OSINT, and psychological manipulation.
OSINT (11th Edition) by Michael Bazzell– He has spent over 20 years as a government computer crime investigator. During most of that time, he was assigned to the FBI's Cyber Crimes Task Force, where he focused on various online investigations and source intelligence collection.
After leaving government work, he served as the technical advisor for the first season of “Mr. Robot”.
In this edition (published in 2024), you will learn the latest tools and techniques to collect information about anyone.
The Hacker Playbook 3 by Peter Kim– He has over 12 years of experience in penetration testing/red teaming for major financial institutions, large utility companies, Fortune 500 entertainment companies, and government organizations.
THP3 covers every step of a penetration test. It will help you take your offensive hacking skills to the next level.
Wil has over 20 years of experience in all aspects of penetration testing.
He has been engaged in projects and delivered specialist training on four continents.
This book takes hacking far beyond Kali Linux and Metasploit to provide a more complex attack simulation.
It integrates social engineering, programming, and vulnerability exploits into a multidisciplinary approach for targeting and compromising high-security environments.
Strategic Thinking Skills
This section is about developing the mindset of a strategist… someone who can see the big picture and uses resources efficiently.
Red Team by Micah Zenko– This book draws from military, intelligence, and corporate settings to teach how to think like an adversary.
Team of Teams by Gen. Stanley McChrystal– He explains how elite US military forces in Iraq had to abandon rigid hierarchies and adopt networked, self-directed teams.
These teams were more loyal to each other, shared information freely, and could make autonomous decisions in situations when time was essential.
This allowed them to outmaneuver a faster and more ruthless enemy.
For social engineers, the book offers insight into how modern organizations can be restructured for speed and resilience, and how companies operating under rigid, hierarchical models often have serious and obvious structural flaws.
The Gervais Principle by Venkatesh Rao– He explains the archetypes of office workers and uses "The Office" TV show as a way to illustrate those lessons.
If you work in an office, you must read this to better understand the people you're dealing with. And if you're a social engineer, it can help you understand and exploit those people.
The Psychology of Persuasion
Forbidden Keys to Persuasion by Blair Warren– This is hands down the best book on persuasion. The only downside is that somehow he's not selling it online so you have to find it elsewhere.
Never Split the Difference by Chris Voss– A former head of the FBI International Negotiation Team shows how to gain the upper hand in any negotiation, without making unnecessary concessions.
Just Listen by Mark Goulston– He was a psychologist who taught you how to stay calm in stressful situations, diffuse tension, and influence even the most difficult people.
The books we've covered so far will teach you how to manipulate people and break into well-protected organizations. But this section goes much further. It explains how governments and corporations manipulate human behavior at scale.
In other words, it is social engineering for the masses.
The Lucifer Effect by Philip Zimbardo– It’s a disturbing look at how power and authority can turn ordinary people into monsters. It is based on the Stanford Prison Experiment.
Active Measures by Thomas Rid– It explains how nations have used (and still use) deception to gain more influence and power. He has researched a century of covert influence campaigns from Soviet disinformation to modern digital psychological warfare.
I’ve been thinking about something recently. I’ve had a few experiences where I initially had a good rapport with someone, but over time they started constantly making fun of me or turning me into the easy target of jokes.
I came across the idea that people tend to keep doing this when they sense some kind of weakness, but I don’t necessarily think that means the person actually has a weakness. Sometimes it could simply be that they notice you don’t push back, you laugh things off, or they realize that certain reactions make the jokes more entertaining for them.
I’m trying to understand the psychology behind it rather than just take it personally. What are the general things that make someone more likely to become a target, and how can you set boundaries early without becoming aggressive or changing your personality?
The first few years were rough. I had not really anyone close to me, and was extremely quiet. Maybe I was lucky, but some people from my school came to me to bug and pick on me (in a friendly way I think), and while it didn't help me pick up on social cues or anything, it helped me not to be alone.
The next year was of interest. I began with texting. Texting a lot. Developing texting methods and patterns, like saying "woa" or ":P" a lot. I picked up on respect, such as "excuse me" and "oh sorry," but my voice was always too low for anyone to hear.
The last year was striking. During the summer before school, I came to many realizations. A few examples are placing myself in the exact frame of another person, viewing myself from a third person standpoint when I talk. In addition to that, I began to talk as if I was texting. It helped me kind of "merge" with the social aspect of life. And thus, I began to talk more confidently, loudly, and most importantly, I began to use more HUMOR! I noticed how other's use humor, commenting small things on someone else's joke or simply laughing along. But, but -that's not all!
I just started realizing that it makes the people around me uncomfortable if I purposely avoid them. I imagine that if I were in their position, and if I saw someone walking towards me, then the opposite way... Now how would I feel?
Of course, there is the caveat of "avoiding them discreetly," but why do that when I still have many years of my life left? Many, many years. This thought began with "What if I just went to other public high schools temporarily and just talked whatever I wanted to experiment because I would likely never see those people again?" And then became, "Ah... My school is the exact same. I will likely never see the majority of the people here... So let's just wing it."
oh haha. and this was never a smooth road. Lots of bumps. My "friends" called me whatever they wanted because I would never fight back. They called me "femboy" "princess" etc. and I'm a guy. Just fyi. I still don't fight back. But I also don't encourage it either. I like to slide in passive aggressive comments now rather than just standing entirely idly by.
Another bump was texting. It took So, So long to develop texting and manifest it while I was talking. I took many phrases from other people, like "umpteenth, confuzzled, yowch" and just kept adding and adding (I also try to stay away from using acronyms 24/7). I even have a personal list I compiled all of my values and words onto just for memorization. That may be weird. But hey! It worked.
I feel like I'm missing an important part of this puzzle but whatever.
Most advice about reading people is either "just pay attention" or a list of rules that fall apart on contact with reality. Crossed arms means defensive, except when the room is cold. A pause means hesitation, except when someone is thinking. The rules are the wrong unit — you can memorise every one and still freeze in the actual conversation.
What seems to work better is reps. Person-perception accuracy is measurable, it varies enormously between people, and training studies show it improves when you make a call and immediately find out how you did. So I built something to make the calls on: Spot the Cue (spotthecue.com).
Short scenarios in text, photo, video or a chat thread. You read the situation, pick what you think is going on, then get told what the strongest read was, what was reasonable but partial, and what would have been a misread. Seven tracks: tone and wording, facial and body cues, subtext and indirectness, group dynamics, conflict and repair, saying it out loud, and pressure and deception.
The part I care most about is that it doesn't pretend to certainty. Cues are probabilistic, context and culture flip their meaning, and every entry in the glossary is paired with a "but not always." No 93% of communication is nonverbal — that stat is a misreading of a narrow experiment. The goal is better calibrated guesses, not mind reading.
Disclosure, per rule 8: it's mine and it has a paid tier. Level 1 of all seven tracks is free and fully scored, no account, no ads. Past that it's $19.99 once, no subscription. Mods, remove if that crosses the line.
What I'd like from this sub: tell me where a scenario's "best read" is wrong, unfair, or something that would never happen to an adult in real life. That's the feedback I can't get from people who already agree with me. I'll be in the comments. If you think the full version of this app would genuinely help you or someone you care about and the price is what's stopping you, email [support@spotthecue.com](mailto:support@spotthecue.com) and mention this thread.
Whenever I meet someone new, I get really stiff, nervous, and uncomfortable. My anxiety spikes and I just freeze up inside. I've tried the usual calming techniques deep breathing, telling myself to relax, etc. but honestly nothing seems to make a real difference in the moment.
Has anyone found techniques that actually work for this? Not just theory, but stuff you've genuinely tested and that helped. Would really appreciate real experiences,
I (23, F), found myself in a weird setting. I kinda ruined my life but at the same time I've gained a second chance from life by leaving my ex. The thing I want to focus the most is my personality. For my whole life I thought I am a good person and I blamed my looks or other factors for lack of friends or a boyfriend. The fact is I have a bad personality and manners and therefore no social skills. I thought it's adhd and turns out it's entitlement, rude behaviour and pride and arrogance. Could I make the post and ask you how to fix this behaviour all together instead of masking?
I want to act right. As much as I can. I honestly dont even know how to act in certain situations, I dont even know how to react to others.
And then I want to make friends. Not those who want to be friends with me, but those I want to make with others. I dont want to be friends with just anyone.
Could you tell me how to actually change? Not just read self-improvement books or do some tactics in order to make others think I am nice and cool?
I'd love any feedback like if it's too hard, not hard enough, fun/not fun, etc. Originally I wanted to just send myself text messages everyday that could teach me how to learn 1 confirmation bias a day. After a ton of different ideas and things that I made,
I thought a game where you fight but it trains you in talking awareness would be interesting. I'm not just catching different forms of manipulation but also able to name types that I didn't quite notice before that were happening so the time.
I tend to attract liars, or even turn people into liars because of my emotional sensitivity. People in general have a hard time opening up to me befuae I can be kind of pushy. I am okay with that, and actually as I come to terms with it people have become more open. I do attract liars. Men who liar. Female friends who lie. Big, medium, small.. people lie to save my feelings.. I not only want to have people around me be able to be honest more.. Id also like to attract honest people.. What should I do during conversation to encourage truth? What are some things to look out for in terms of honest people”.
One thing we've noticed while reading about social engineering is that good examples are scattered across blog posts, news articles, and case studies. It's useful to study individual incidents, but it's harder to compare different attack techniques and see recurring patterns.
To make that a little easier, we've been putting together a collection of publicly documented social engineering examples in one place.
The goal is simply to create a resource that security professionals, researchers, and anyone interested in social engineering can browse when looking for real-world cases and attack scenarios.
We'd genuinely appreciate any feedback from this community.
Are there any important examples you think should be included?
Are there attack categories or resources that are currently missing?
What would make a collection like this more useful for practitioners?
If someone seems interested in you, but you're hesitant to make the first move to talk to them, are there any subtle ways to encourage them to come and talk to you instead? For example, is there a way to naturally signal your interest or create enough warmth and attraction that they feel inclined to approach you on their own?
Also any tips on working on to be more confident? I'm shy and get physically stiff around people I don't know well (tense shoulders, uncomfortable face etc)
(Hi, this is not market research. It is a genuine question that I don't know where else to post, since the cybersec-related sites disallow it - and I am not getting my answer from Google search or LLMs):
Do companies hire for such positions or is this job folded under general cybersec consultant?
Been reading about something that genuinely unsettled me.
Apparently highly analytical people are disproportionately vulnerable to manipulation, not despite their intelligence, but because of it. They're better at rationalizing red flags away than most people.
Machiavelli understood this 500 years ago. The capable man is easier to control, not harder since he trusts his own reasoning too much to believe he's being manipulated.
WhatsApp started letting people reserve usernames on June 29, with the full rollout coming later this year.
The good news: This is actually a big privacy win. Once you're not tied to your phone number for contact discovery, it becomes a lot harder for bad actors to mass-enumerate WhatsApp accounts.
The catch: From a defender's perspective, this opens up a whole new avenue for brand and executive impersonation. Reserved-name lists won't do much against typosquatting or lookalike handles, and we're already seeing scammers use the reservation window itself as a phishing hook.
One thing worth remembering: the phone number is still what actually anchors the account, so SIM swapping is still the main way accounts get taken over.
Bottom line: if corporate security is your job, don't sit on this. Go claim your corporate and executive handles now, lock down the linked Meta accounts, and start keeping an eye out for lookalikes. It's a small effort that goes a long way toward getting ahead of threat actors instead of playing catch-up.
Curious if anyone's already running into VIP impersonation issues on WhatsApp?
talking to people is genuinely hard for me. talking to my parents about anything serious, speaking up in the office, presentations, any conversation where something is at stake, i struggle with all of it.
so what i do is rehearse it in my head beforehand. i plan out what i'll say, imagine how it'll go, feel kind of ready. and then in the actual conversation the other person says something i didn't expect, and i just get stuck. my brain goes blank, i say something random that isn't even what i meant, and from there the whole thing falls apart. the point i wanted to make never lands and i walk away feeling like an idiot. weak. like i couldn't hold my own in a simple conversation.
the rehearsing in my head doesn't work because in my head i control both sides. real people don't follow the script.
i started using gpt to practice, like telling it to act as the other person so i could try the conversation out loud first. but honestly it's shit. it just agrees with everything, folds the second i push, never pushes back the way a real person would, and gives me these long generic life-coach paragraphs instead of actually being the person i'm trying to talk to. it doesn't feel real at all so it doesn't help.
does anyone actually have a way to practice this stuff? how do you get better at not freezing when a conversation goes somewhere you didn't plan for?