Marina Ciavatta: From Journalism to Social Engineering and Physical Pentesting

From Journalism to Hacking

• 💡 Marina Ciavatta initially pursued a journalism degree, driven by a passion for writing and storytelling, but grew disillusioned with the media's role in corruption.
• 🧠 Despite a background in humanities and social anxiety, her "nerdism" and fascination with technology led her to a content producer role at an IT company.
• ✨ This role exposed her to the world of information security and hacking, sparking a deep interest and a career pivot.

Discovering Social Engineering

• 🎯 Marina found hacking intoxicating and discovered social engineering as a non-technical entry point, focusing on human behavior and communication.
• 🗣️ She organized over 250 hacking and infosec events, which further solidified her interest in the cultural and behavioral aspects of security.
• 🤝 A friend's request for help with a physical penetration test led to her first hands-on experience in the field.

The Role of a Physical Pentester

• 🕵️‍♀️ As a physical pentester and CEO of Hekate, Marina's job is to test a company's security layers, particularly the human element.
• ⚠️ She exploits human error, such as open doors or trusting strangers, to gain unauthorized access and identify security vulnerabilities.
• 🚀 Her approach involves testing how employees respond to her actions, emphasizing that she doesn't seek permission to enter but finds alternative means.

Advice for Aspiring Social Engineers

• 💬 Marina advises aspiring physical pentesters to actively mingle with other social engineers and attend industry events to build connections.
• ⚠️ She stresses the importance of strong self-control to avoid becoming unhinged by the power one can wield, emphasizing the need to stay truthful to the mission.
• 🛠️ Building a network and finding collaborators is crucial, as the field is vast and rapidly evolving.