Social Engineering Contest

Social Engineering Contest – Defcon 2009

Social Engineer your way to a free course!

DC718 and Telephreak are bringing Social Engineering back to Defcon.

Offensive Security has linked together with DC718, Telephreak, the contest/event Goons Pyr0 and Russr and www.social-engineer.org to have the best of the best to judge and help mold this contest into the display of the serious threat that still exists with this attack vector. For more information, check www.defconsecontest.com

Consisting of two rounds, teams will compete for the bragging rights of “Best Social Engineer @ #DefCon 17 , 2009.” and ONE free “Pentesting with BackTrack” online course for the winning team. With a few simple rules, the Social Engineering contest is open to any form, style and exploit you wish to bring, in so long as you can follow the rules and not endanger or disseminate anyone’s credentials or personal information.

Stay in the know: Become an OffSec Insider

Get the latest updates about resources, events & promotions from OffSec!

Latest from OffSec

Research & Tutorials

CVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usage

CVE-2025-3248 is a critical RCE vulnerability in Langflow that allows unauthenticated attackers to execute arbitrary Python code via unsanitized input to exec(). Learn how it works and how to protect your system.

Jun 18, 2025

2 min read

Research & Tutorials

CVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluence

Critical RCE vulnerability (CVE-2024-21683) in Atlassian Confluence Data Center and Server (v5.2–8.9.0) allows authenticated users to execute arbitrary code via malicious code macros.

Jun 12, 2025

2 min read

Research & Tutorials

CVE‑2025‑49113 – Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization

A critical RCE vulnerability (CVSS 9.9) in Roundcube Webmail (

Jun 12, 2025

3 min read

View all blogs