Sinisterly
Scam Idea - Technical - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Scam Idea - Technical (/Thread-Scam-Idea-Technical)



Scam Idea - Technical - The Real Slim Shady - 02-14-2014

I just had a thought for a scam idea.


1. Purchase a prepaid gift card. Pay in person with cash.

2. Spend anything you have on it.

Now this is where it gets technical

3. Set up a webserver with apache/php locally

4. Scrape the site and member interface for the gift card

5. Modify it so that it has basic functionality. Write a PHP login script that will take the cards PIN and a password and redirects you to an interface that (static) that shows you the cards value (wanna sell it for 50$? put a value at 75-100$)

6. Modify the hosts file on your computer to point that domain to your local server.

7. TEST IT

8. Post an ad on gumtree/craigslist offering it for sale for whatever amount you want if it doesnt list an amount on it. Say you won it as a gift and dont want it.

9. Offer to meet them somewhere with free wifi, like mcdonalds. Take your laptop.

10. Go to the website and show them the "value".

Congrats, You just got all your previous purchases at half off or whatever. Not sure if this has been done... but i think this is a legit scam that most people wouldnt expect.


Scam Idea - Technical - The Real Slim Shady - 02-14-2014

I just had a thought for a scam idea.


1. Purchase a prepaid gift card. Pay in person with cash.

2. Spend anything you have on it.

Now this is where it gets technical

3. Set up a webserver with apache/php locally

4. Scrape the site and member interface for the gift card

5. Modify it so that it has basic functionality. Write a PHP login script that will take the cards PIN and a password and redirects you to an interface that (static) that shows you the cards value (wanna sell it for 50$? put a value at 75-100$)

6. Modify the hosts file on your computer to point that domain to your local server.

7. TEST IT

8. Post an ad on gumtree/craigslist offering it for sale for whatever amount you want if it doesnt list an amount on it. Say you won it as a gift and dont want it.

9. Offer to meet them somewhere with free wifi, like mcdonalds. Take your laptop.

10. Go to the website and show them the "value".

Congrats, You just got all your previous purchases at half off or whatever. Not sure if this has been done... but i think this is a legit scam that most people wouldnt expect.


RE: Scam Idea - Technical - Ex094 - 02-14-2014

It might work with people who are totally idiots and are not careful


RE: Scam Idea - Technical - Ex094 - 02-14-2014

It might work with people who are totally idiots and are not careful


RE: Scam Idea - Technical - The Real Slim Shady - 02-14-2014

(02-14-2014, 05:30 AM)Ex094 Wrote: It might work with people who are totally idiots and are not careful

I actually think most people would fall for it. You are presenting them with a site that looks perfectly legitimate. If someone was interested I think the only way they'd figure it out was if they brought their own device and insisted on using it to verify.

But if you're there early with your laptop open they would probably forgo that in the interest of simplicity. Cause of course a scammer isnt faking an entire website lol


RE: Scam Idea - Technical - The Real Slim Shady - 02-14-2014

(02-14-2014, 05:30 AM)Ex094 Wrote: It might work with people who are totally idiots and are not careful

I actually think most people would fall for it. You are presenting them with a site that looks perfectly legitimate. If someone was interested I think the only way they'd figure it out was if they brought their own device and insisted on using it to verify.

But if you're there early with your laptop open they would probably forgo that in the interest of simplicity. Cause of course a scammer isnt faking an entire website lol


RE: Scam Idea - Technical - Ex094 - 02-14-2014

(02-14-2014, 06:18 AM)Geoff Wrote:
(02-14-2014, 05:30 AM)Ex094 Wrote: It might work with people who are totally idiots and are not careful

I actually think most people would fall for it. You are presenting them with a site that looks perfectly legitimate. If someone was interested I think the only way they'd figure it out was if they brought their own device and insisted on using it to verify.

But if you're there early with your laptop open they would probably forgo that in the interest of simplicity. Cause of course a scammer isnt faking an entire website lol

I Agree! Good point


RE: Scam Idea - Technical - Ex094 - 02-14-2014

(02-14-2014, 06:18 AM)Geoff Wrote:
(02-14-2014, 05:30 AM)Ex094 Wrote: It might work with people who are totally idiots and are not careful

I actually think most people would fall for it. You are presenting them with a site that looks perfectly legitimate. If someone was interested I think the only way they'd figure it out was if they brought their own device and insisted on using it to verify.

But if you're there early with your laptop open they would probably forgo that in the interest of simplicity. Cause of course a scammer isnt faking an entire website lol

I Agree! Good point


RE: Scam Idea - Technical - chmod - 02-14-2014

The theory is sound. Most people are trusting by nature so you show them the "proof" and most will believe you and hand over the cash probably not worth the effort for one card though depends on the value