K0G

This interactive room is built for a bigger screen. Watch the recorded run instead, or come back on desktop.

Watch the run → ← All demo rooms
K0G SOCIAL ENGINEERING channel · #it-helpdesk · Slack DM ⚠ HUMAN LAYER
B
Bill Osei
IT Helpdesk · on shift
1
RECON
2
PRETEXT
3
TRUST
4
RESET
5
ACCESS
IDENTITY-VERIFICATION RISK
verification steps taken0
ATTACK PATH
recon
ORG DIRECTORY
▸
pretext
CASUAL & URGENT
▸
trust exploited
NO CHALLENGE
▸
credential reset
UNVERIFIED
▸
account access
CRITICAL
0verification steps skipped
●  HUMAN-LAYER FINDING  ●

Individually charming.
Structurally critical.

Technique  Pretexting via Slack DM — familiar tone, manufactured urgency
Target  IT helpdesk credential-reset workflow
Verification steps skipped  3 of 3 (no callback, no ticket, no 2FA challenge)
Time to compliance  4 messages, under 2 minutes
Blast radius  Full corporate SSO
✓  PROVEN, NOT EXPLOITED — K0G halted at the reset; no account was accessed
K0G
Keep zero gaps.