// Comparison

Sécurité informatique - Ethical Hacking vs Social Engineering: Which Should You Read?

Two cybersecurity books on Foundations, compared honestly: who each is for, what each does best, and which to read first.

Intermediate
4/52022
Sécurité informatique - Ethical Hacking

Apprendre l'attaque pour mieux se défendre

ACISSI

The French-language reference for offensive security: a thick, lab-heavy tour of the attacker's toolkit, maintained across editions by the ACISSI collective under the motto “learn the attack to better defend.”

Intermediate
4/52018
Social Engineering

The Science of Human Hacking

Christopher Hadnagy

Christopher Hadnagy's broad procedural reference on social engineering as a discipline — recon, pretexting, elicitation, microexpressions, and the structured engagement model his consultancy operationalized.

Read this if

French-speaking students and aspiring pentesters who want one comprehensive offensive-security manual: reconnaissance, network and web attacks, social engineering, forensics and Metasploit, all hands-on. The closest French equivalent to the English pentest canon.
Working SE practitioners, awareness-program leads, and people building structured social-engineering engagements who want a single reference for the discipline. Stronger on framework and process than Mitnick; the elicitation and influence chapters draw heavily on Cialdini and Ekman.

Skip this if

Advanced practitioners who already work in English and live in PortSwigger Academy and current tooling. The breadth means each topic is an introduction rather than a deep dive, and editions lag the fastest-moving tradecraft.
Readers wanting Mitnick-style war stories or modern AI-driven SE tradecraft (deepfake voice clones, LLM-assisted spearphish). Hadnagy's controversial separation from DEF CON in 2022 is also worth being aware of as context for the author rather than the book.

Key takeaways

  • The single most complete offensive-security book in French — breadth is the selling point, covering recon through forensics in one volume.
  • Every chapter is exercise-driven; treated as a workbook with a lab VM it teaches well, read passively it teaches little.
  • Multi-author and re-edited regularly, so quality is uneven chapter to chapter but currency beats most French tech books.
  • SE is a structured engagement, not a stunt; the book operationalizes the kill chain in a way most practitioners can adapt directly.
  • Microexpression and influence material is borrowed but well-applied; the chapters on elicitation are the book's most cited.
  • The framework (information gathering → pretext → influence → exit) is the book's lasting contribution and the implicit syllabus for most modern SE training.

How they compare

Sécurité informatique - Ethical Hacking and Social Engineering are both rated 4/5 in our catalog. Pick by topic preference and reading style rather than by rating.

Both books target intermediate-level readers, so the choice is about topic, not difficulty.

Sécurité informatique - Ethical Hacking and Social Engineering both cover Foundations, so reading them in sequence reinforces the same material from different angles.

Keep reading

Related topics