The human in the equation is always the weakest security link. Metasploit, nmap, Burp and such tools do nothing for the security professional in hacking the human factor. Social engineering techniques and skills, alone, provide the powerful mechanism for cracking the human element. While many security professionals conduct "anonymous" social engineering attacks (phishing schemes and such) most have been led to believe that do do non-anonymous social engineering one must be a charismatic mythical man. This talk breaks the myth that myth and shows the average, introverted person how to do good "in person" social engineering and open up new doors to assessments.