Sinisterly
SE Help - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: SE Help (/Thread-SE-Help--91249)

Pages: 1 2 3


SE Help - Oikos - 08-30-2017

I've done small clothing purchases and orders before but never had to RMA. Now I have a company that is asking for RMA and won't refund or send a new one until they've received this. Im thinking the boxing method would work but they said they wouldnt release funds or re ship me a replacement until they've received the item.

If anyone can help I'd be more than happy to share how I've gotten this far, and which company/product its for.


RE: SE Help - Skryptec - 08-31-2017

You could just send them dry ice in the box with weight similair to the item you're RMA'ing. This way the 'item in the box' will be lost in transit.


RE: SE Help - Oikos - 08-31-2017

Yeah thats what I figured, but with them constantly repeating that theyd wait until the item physically arrived I'd had thought the method might not work. Thanks for the advice!

Company was TPMBM and all that was necessary to get an RMA was the S/N of any product. Say invoice is unavail due to it being gifted (it's super common with them) and just play it off like a manufacturers defect (look into your products common ones)


RE: SE Help - phyrrus9 - 08-31-2017

(08-30-2017, 10:07 PM)Oikos Wrote: I've done small clothing purchases and orders before but never had to RMA. Now I have a company that is asking for RMA and won't refund or send a new one until they've received this. Im thinking the boxing method would work but they said they wouldnt release funds or re ship me a replacement until they've received the item.

If anyone can help I'd be more than happy to share how I've gotten this far, and which company/product its for.

Ok, so now you're at a point when you need to start using social engineering. What you've done to this point isn't SE, it's lying. Now you need to use your manipulation skills to get ahold of someone in the RMA department, and have them give you a list of the ITN's of all the items they have received within x days (so it looks realistic) that are the same as the item you need to be sending in. Then, you wait a little bit and call back (so you get a new CSR), and tell them that you did send your item in, but from a different address, and that the rep you spoke with told you to give them the ITN of the item you sent because it would conflict with your address. Then, you give them one of the ITN's on your list (make sure the RMA for that item isn't IP), and hope that they don't do too much digging into the one you gave them. If you succeed, give them a business address, and intercept the package on arrival (use social engineering to impersonate an employee of said business).


RE: SE Help - yourmumfc - 09-02-2017

(08-31-2017, 02:46 PM)phyrrus9 Wrote:
(08-30-2017, 10:07 PM)Oikos Wrote: I've done small clothing purchases and orders before but never had to RMA. Now I have a company that is asking for RMA and won't refund or send a new one until they've received this. Im thinking the boxing method would work but they said they wouldnt release funds or re ship me a replacement until they've received the item.

If anyone can help I'd be more than happy to share how I've gotten this far, and which company/product its for.

Ok, so now you're at a point when you need to start using social engineering. What you've done to this point isn't SE, it's lying. Now you need to use your manipulation skills to get ahold of someone in the RMA department, and have them give you a list of the ITN's of all the items they have received within x days (so it looks realistic) that are the same as the item you need to be sending in. Then, you wait a little bit and call back (so you get a new CSR), and tell them that you did send your item in, but from a different address, and that the rep you spoke with told you to give them the ITN of the item you sent because it would conflict with your address. Then, you give them one of the ITN's on your list (make sure the RMA for that item isn't IP), and hope that they don't do too much digging into the one you gave them. If you succeed, give them a business address, and intercept the package on arrival (use social engineering to impersonate an employee of said business).

That does IP mean "(make sure the RMA for that item isn't IP)"


RE: SE Help - phyrrus9 - 09-02-2017

(09-02-2017, 10:34 PM)yourmumfc Wrote:
(08-31-2017, 02:46 PM)phyrrus9 Wrote:
(08-30-2017, 10:07 PM)Oikos Wrote: I've done small clothing purchases and orders before but never had to RMA. Now I have a company that is asking for RMA and won't refund or send a new one until they've received this. Im thinking the boxing method would work but they said they wouldnt release funds or re ship me a replacement until they've received the item.

If anyone can help I'd be more than happy to share how I've gotten this far, and which company/product its for.

Ok, so now you're at a point when you need to start using social engineering. What you've done to this point isn't SE, it's lying. Now you need to use your manipulation skills to get ahold of someone in the RMA department, and have them give you a list of the ITN's of all the items they have received within x days (so it looks realistic) that are the same as the item you need to be sending in. Then, you wait a little bit and call back (so you get a new CSR), and tell them that you did send your item in, but from a different address, and that the rep you spoke with told you to give them the ITN of the item you sent because it would conflict with your address. Then, you give them one of the ITN's on your list (make sure the RMA for that item isn't IP), and hope that they don't do too much digging into the one you gave them. If you succeed, give them a business address, and intercept the package on arrival (use social engineering to impersonate an employee of said business).

That does IP mean "(make sure the RMA for that item isn't IP)"

IP = In Progress. Make certain that it's in its early stages, rather than already being in diagnosis or repair.


RE: SE Help - yourmumfc - 09-03-2017

(09-02-2017, 11:57 PM)phyrrus9 Wrote:
(09-02-2017, 10:34 PM)yourmumfc Wrote:
(08-31-2017, 02:46 PM)phyrrus9 Wrote: Ok, so now you're at a point when you need to start using social engineering. What you've done to this point isn't SE, it's lying. Now you need to use your manipulation skills to get ahold of someone in the RMA department, and have them give you a list of the ITN's of all the items they have received within x days (so it looks realistic) that are the same as the item you need to be sending in. Then, you wait a little bit and call back (so you get a new CSR), and tell them that you did send your item in, but from a different address, and that the rep you spoke with told you to give them the ITN of the item you sent because it would conflict with your address. Then, you give them one of the ITN's on your list (make sure the RMA for that item isn't IP), and hope that they don't do too much digging into the one you gave them. If you succeed, give them a business address, and intercept the package on arrival (use social engineering to impersonate an employee of said business).

That does IP mean  "(make sure the RMA for that item isn't IP)"

IP = In Progress. Make certain that it's in its early stages, rather than already being in diagnosis or repair.


How would you know what stage it is in? Would the person you are speaking to just tell you?

Also, do you have discord? I'd like to talk some more.


RE: SE Help - phyrrus9 - 09-04-2017

(09-03-2017, 04:21 AM)yourmumfc Wrote:
(09-02-2017, 11:57 PM)phyrrus9 Wrote:
(09-02-2017, 10:34 PM)yourmumfc Wrote: That does IP mean  "(make sure the RMA for that item isn't IP)"

IP = In Progress. Make certain that it's in its early stages, rather than already being in diagnosis or repair.


How would you know what stage it is in? Would the person you are speaking to just tell you?

Also, do you have discord? I'd like to talk some more.

How would I know? You have to do your research. 90% of any sort of hacking is research. You can't just go in blind and demand they give you things.


RE: SE Help - Slacker - 09-08-2017

@phyrrus9 I go in blind sometimes it makes it more challenging that way to be honest and as we both know challenging can be way more fun at times


RE: SE Help - phyrrus9 - 09-08-2017

(09-08-2017, 04:19 AM)Slacker Wrote: @phyrrus9 I go in blind sometimes it makes it more challenging that way to be honest and as we both know challenging can be way more fun at times

One of my high school English teachers once said "You can't break the rules until you know them well". The same thing goes with coding and hacking. You can't do the tricky stuff until you understand how it all works. In the case of SE, it means you can't go in blind until you've done it the right way enough to know your way around.