+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Social engineering ebook [Free] (/Thread-Social-engineering-ebook-Free)
Social engineering ebook [Free] - android() - 07-29-2014
Social engineering for Beginners
Chapter one
Starbucks and beginning SE
Do me a favor, go to google and type in define:Social Engineering. In case you're lazy here is the definition.
so·cial en·gi·neer·ing
noun
noun: social engineering
The application of sociological principles to specific social problems.
Social Engineering is just that. Applying sociological principles to solve specific problems. We are going to look at many uses of sociological techniques, and what can be obtained using them.
When you first decided you wanted to learn to SE you were really deciding you wanted to learn to lie. Not just lie, you wanted to lie really really well. The idea of lying is not a simple one. You have to earn trust in a quick amount of time. Depending on who you are working with, this can be either very easy, or very difficult. Not only do you have to gain their trust, you have to make them believe that they have hurt you in some sort of way.
There are many types of SE’s, the first one we are going to be looking at is a classic. The “my product was bad” type of SE. This can be done to many popular restaurants including KFC, Taco Bell, Starbucks. I will be including communication between myself and some companies later in this ebook.
To learn the mechanisms of how one of these scenarios works, we first need to break it down to simple steps.
Establish communication with the Company
Here we are getting our “support ticket” per say. This is our foothold from where we launch our attack. A good establishment can mean easy riding throughout the rest of the process. If your story is long and complex, people become suspicious. Your goal is to pack as many excuses into a short email as you can. For example, Coke always asks for a packaging number when you file a claim about a product. To avoid pitfalls in your email include “After drinking the coke i threw it away, i didn’t expect anything to happen.” Because it was in your first email, if the customer rep asks you for a product code, it won’t sound like you made it up on the spot. Preparation is key, and getting a good Establishment is the first step is a successful SE.
The phone call
This is it, the moment you have been waiting for. If you ever try to SE starbucks know that they will need a call. Don’t be afraid, you CAN do this. The person behind the phone is not calling to see if you actually had a bad experience, they are calling you because it is company protocol. They don’t want to call you as much as you don’t want to talk to them. Just be calm and answer their questions. It’s handy to have a store location in which you “bought” the product. This way you sound confident and do not falter when they ask. If you can, have a copy of your original email on hand as well. This way you can reference back to it, and won’t create a web of lies that spin out of control.
Chapter 2
Bigger companies
So you want a computer monitor eh? Well this is what chapter two is all about. Online transactions, and bigger companies. Once again the key is preparation, and the more prepared you are, the easier it’s going to be to have a successful SE. It’s easy Se’ing big companies if you know the 5 steps.
Establishment
Serial
Proof
Replacement
Profit
Like chapter one discussed establishment is your foothold. Having a successful establishment makes life easier down the road. Alright so you have establishment, now they are asking for a serial. Well there are a few methods. You can use craigslist, ebay, or any other websites that allow users to sell items. Craigslist is a good one. Tip: Use a southern city to find your serial, as bad as it sounds, you will have more success in the south. Once you have a serial, you will need proof. Photoshop is perfect, find a picture of your item, then use photoshop to put a small crack in it.
Advanced replacement is your friend. Make your rep feel bad for you, however DO NOT RAGE. Some people say it helps, but if you are nice, you get more accomplished. Some excuses for advanced replacement: You are in some sort of contest: you are having a party: you have relatives coming into town. Make sure you have a vcc or a cracked visa card. This way they can put a 2$ hold to make sure you have funds. This is your best bet.
Drops are a good idea, however not always necessary. Times when to use drops.
When someone else is doing the SE for you
On a high profile company, or one that is big
You have already SE’d an item from the same company
Chapter 3
Mindset and practice
The mindset, or attitude is very important. If you sound nervous or scared, you won’t be able to get your items. Smile and sit up in a chair, it affects your voice. Also, try to have actual clothes on, not pajamas, this also affects your voice. These companies owe you their product, they sold you a faulty one. You are calling them to get your refund or replacement. You love their company, but this just ticks you off.
One of my favorite ways to practice my phone SE is to call up a southern walmart. Now, i have had a 90% success rate calling wal mart's from the southeastern united states. Alabama is perfect. Call up the walmart and ask for their technology dept. Say you are from “Itunes, steam, amazon” And you need to check their gift cards, as you think they have a bad batch. Have them read you the code on the card. Write that number down. You can then either have them activate it at register, or end your call and open a support ticket on the website you impersonated, saying your card is not working.
Tips: When you are calling use google voice, or any call spoofer, to make your call seem like it is not from your phone. This will protect your identity.
Tools
Amazon Kindle serial generator *i Virus scanned clean, comes from my own dropbox
https://www.dropbox.com/s/ox6cruzmfeo7198/Amazon.rar
Amazon receipt generator *not my work, found by googling, run in sandboxie
http://www.4shared.com/rar/0WF3Ic8Q/Amazon_Receipt_Generator_v2.htm?locale=en
Call spoofer *limited amount of times per phone number:: unlimited time
https://www.spoofcard.com/
Contact us links
Red Bull
http://www.redbullusa.com/cs/Satellite/en_US/ContactUs/Contact-Us-021242753482445
Gatorade
https://cu.pepsico.com/gatorade
Cottonelle
https://www.cottonelle.com/contact-us
Pepsi
https://cu.pepsico.com/pepsi
Starbucks
http://customerservice.starbucks.com/app/contact/ask/
Amazon
https://www.amazon.com/gp/help/contact-us/general-questions.html/183-1259110-1246804?ie=UTF8&skip=true
Vulnerable stores
Now we are going to discuss popular store commonly SE'D, and some not so popular harder to see.
Some common ones include
Walmart
Amazon
Ebay
Any pizza place
Starbucks
Those are the ones we will be doing an in depth study on. First we will start off with walmart . I have mentioned some Walmart methods, but now I am going to be going over some more. An easy starter is to use a receipt generator to generate a Walmart receipt. Then walk in, grab the product you want, and walk to the returns counter. Now, you have a receipt and your item. Also, bring in a Walmart bag in your pocket, that way it looks more real. Another Walmart method is to call them up, typically a southern Walmart as they are easier, and say you are calling from (insert company you want to impersonate) and say you need to check on some items. Typically this is used to get numbers from prepaid cards, or game cards.if you are ballsy enough, you can always buy a Walmart T-shirt and name badge. Have a friend head bin before nyou to the electronics dept. "Assist" them taking something down. If your targeting a game, say you don't have your key,have another employee open the game cabinet. Then, walk out with your items.
Ebay is even easier, no calling necessary. Here is the deal. Find an item that has a buy it now option. Also, find one that has a low seller reputation, as these people have not been on ebay long. The lower the better. What your going to do is click buy now, but stop before you proceed to check out. Message the seller saying something along the lines of, paypal is holding the funds until they can confirm shipping. I called them today to see what was going on, they said i had a student account and this was my first purchase above 500$. Sorry about the hassle, payment should be released as soon they get shipping confirmation.
Prepaid cards and gift cards are slightly harder. You need to visit your local store, scratch off a few codes, copy them down. Then contact apple saying your card is not working. With some patience and practice you should be able to get into the swing of things where they start giving you the code. Simply say it does not work, they will ask for your code. You already have it!
RE: Social engineering ebook [Free] - yunguglygod - 08-10-2017
what would be the minimum eBay rating for sellers you would suggest for the eBay method?
RE: Social engineering ebook [Free] - raymondboy10 - 08-24-2017
(08-10-2017, 09:39 PM)yunguglygod Wrote: what would be the minimum eBay rating for sellers you would suggest for the eBay method?
I would say 80% but also look for first time sellers i was thinking of getting a gucci belt off a first time seller lol.
RE: Social engineering ebook [Free] - raymondboy10 - 08-24-2017
(08-10-2017, 09:39 PM)yunguglygod Wrote: what would be the minimum eBay rating for sellers you would suggest for the eBay method?
I would say 80% and less but also look for first time sellers i was thinking of getting a Gucci belt off a first time seller .lul