step one is to set up a fake website for social engineering to collect credentials. TTP #1. Tacos, Tequila, and Pinto Beans