+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Ways to practice SE (/Thread-Ways-to-practice-SE)
Ways to practice SE - WIC - 04-06-2015
As someone who has been attempting to learn social engineering, I'm dismayed by the lack of decent missions laid out in order of magnitude of skill in the same way other fields of hacking do.
I know that personally, I'll need a lot of practice in becoming a social engineer. My problem currently is finding ways to practice.
What are good targets and objectives against these targets for a beginning social engineer, especially one that plans to base their work over the phone?
tl;dr What should social engineers try to SE as a good starting point, specifically in the medium of phones?
RE: Ways to practice SE - Eclipse - 04-06-2015
Amazon is piss-easy to SE, you could try them. SWIM's first SE was a Kingston USB.
RE: Ways to practice SE - WIC - 04-06-2015
What's exactly the outline of the mission? Do you pretend to have not gotten your product, or what?
RE: Ways to practice SE - Satan - 04-06-2015
(04-06-2015, 11:28 AM)WIC Wrote: What's exactly the outline of the mission? Do you pretend to have not gotten your product, or what?Outline of the "mission"?
Are you asking for a step by step or something?
Here's the thing. You can't just say, " Oh, I'd rate doing this below that" with SEing. You can have a lot of success with it, but that doesn't mean reiterating the same thing over and over will always work. People learn, so you have to change it.
It's like variables. The only way to get it to work is to try. See what they ask for, and see if you can fake it.
RE: Ways to practice SE - lux - 04-06-2015
If you lie to a company for personal gain, you're not a social engineer. You're a greedy illegal liar.
In regards of how to get free shit, lie to companies. Use your brain. What would they /ACTUALLY/ refund/replace?
RE: Ways to practice SE - OversouL - 04-06-2015
(04-06-2015, 01:16 PM)Lux Wrote: If you lie to a company for personal gain, you're not a social engineer. You're a greedy illegal liar.I think social engineer is just a fancy word for scammer to make them feel special. XD
In regards of how to get free shit, lie to companies. Use your brain. What would they /ACTUALLY/ refund/replace?
Anyway, Read throught the companies refund policy or something. Get enough proof that they require first then attempt the SE.
RE: Ways to practice SE - WIC - 04-06-2015
(04-06-2015, 01:07 PM)Six Wrote: Outline of the "mission"?I understand what you're saying, but some SE jobs are obviously easier than others. My idea was getting a list of really easy SE jobs with a set goal in mind. For Amazon, the goal might be "Get a refund or replacement for a product you never bought," a small business "Get them to tell you as much information about their security as possible." ETC.
Are you asking for a step by step or something?
Here's the thing. You can't just say, " Oh, I'd rate doing this below that" with SEing. You can have a lot of success with it, but that doesn't mean reiterating the same thing over and over will always work. People learn, so you have to change it.
It's like variables. The only way to get it to work is to try. See what they ask for, and see if you can fake it.
I essentially want easy, low risk SE jobs with a predefined goal as a way to improve my SE skills.
RE: Ways to practice SE - Satan - 04-06-2015
Low risk?
Convince McDonald's your burger was shit and get a free one.
There, you have a goal.
RE: Ways to practice SE - lux - 04-06-2015
CHALLENGE:
Pick up your local phone book directory, go to random page, pick a random number. Now get a timer, and call that number. As soon as they pick up you start the timer, and your goal is to talk to them for 10 minutes.
RE: Ways to practice SE - WIC - 04-07-2015
Lux, as broad as that sounds, I like it.
and Six lol, almost tempted to do that