+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Guides or mentorship on SEing (/Thread-Guides-or-mentorship-on-SEing)
Guides or mentorship on SEing - Faxx - 06-12-2018
Hello guys!
I literally just joined the forum and so far I love it, the community seems cool and not toxic as the Nulled one haha.
I am from Europe, 23 years old. Lately I've been really fascinated by SEing and all its forms.
That is why I am asking you if you have any advice on which guides I should read to start off or if there's someone willing to be a mentor for me (and maybe build future partnerships).
I am a really committed person and I am willing to learn and study hard to get good with this and get all the knowledge possible.
Thanks in advance!
RE: Guides or mentorship on SEing - Slippery Slope - 06-12-2018
It's a pretty simple art, if you want to call it that. All it takes is somebody that can easily persuade and is good with their words.
With that being said, I think you should start off with something small - My first SE was a LifeProof phone case that I didn't want to pay for. I went to the store, found one on the shelf, walked to the checkout isle and bought it (I think it was around $75..). Shortly after buying it and grabbing the serial number, I walked back in and returned it and told them that I grabbed the wrong generation case. I took that serial number and called the LifeProof 'Contact Us' number and told them that when I purchased the case, it was missing the rubber seals, so it wasn't waterproof. The representative asked me for the serial number, and I gave it to him - and after a few minutes, he asked me for my shipping address and sent me another case.
It's really that simple. You can buy bulk serial numbers online and in theory receive bulk LifeProof cases.
I didn't actually need a case for my phone though. I ended up putting it on Amazon and made a quick $60.
RE: Guides or mentorship on SEing - mothered - 06-12-2018
First and foremost, It's of utmost Importance to have a clear understanding of the "true" meaning of social engineering.
Almost every online source, defines It as obtaining personal Information for fraudulent purposes or otherwise. Whilst this Is the case, by no means Is It conclusive. I was basically fed up with the misrepresentation and exaggerated articles floating around the net, hence addressed (and concluded any questionability) pertaining to the art of human manipulation In this thread a few months ago.
For convenient viewing, I'll also provide It here.
Quote:Allow me to clarify a few things here with social engineering. There's a lot people who do In fact completely overlook the SEing side of It, and only take the "end result" Into account hence deem It as no relevance to social engineering.
Simply put and In general terms, SEing Is manipulating the person on the other end Into doing something they're not supposed to do. The end result Is Immaterial. It's the methodology used to achieve the end result that's classed as social engineering.
For example:
(1). You obtain personal Information and credentials such as family names, given names, addresses, date of births, phone number,s bank account name & numbers, merchant Ids, Inter-company codes, usernames & passwords, CC numbers, CC account holder, expiration dates, CVV numbers and the list goes on.
This was performed via person-to-person contact over the phone.
The methodology used to obtain this Information, Is social engineering. Not the end result.
(2). You've been authorized access to a restricted building, bypassing the building's entry code.
This was performed by assuming the role of an employee, dressed accordingly In a suit, wearing (what appeared to be) an authenticated ID and as such, another employee left the door ajar for you and you've walked Into the building.
The methodology used to gain access to the restricted building, Is social engineering. The end result Isn't.
(3). In the case of "Amazon" on this board. The methodology used to steal the Item In question, Is classed as social engineering. The end result Is not.
Yes (where applicable), I agree It Is stealing there's no question about It, but Identifying the vulnerability(s) of the person on the other end, exploiting those vulnerabilities (hence circumventing the human firewall) and getting the person to do something they're not supposed to do (refund/replace the Item) Is social engineering. The end result Is not.
As you can see, the results of all analogies above have a different outcome. However, the key element Is the methods used to get the result- all of which pertain to social engineering.
RE: Guides or mentorship on SEing - Faxx - 06-12-2018
(06-12-2018, 09:17 AM)mothered Wrote: First and foremost, It's of utmost Importance to have a clear understanding of the "true" meaning of social engineering.
Almost every online source, defines It as obtaining personal Information for fraudulent purposes or otherwise. Whilst this Is the case, by no means Is It conclusive. I was basically fed up with the misrepresentation and exaggerated articles floating around the net, hence addressed (and concluded any questionability) pertaining to the art of human manipulation In this thread a few months ago.
For convenient viewing, I'll also provide It here.
Quote:Allow me to clarify a few things here with social engineering. There's a lot people who do In fact completely overlook the SEing side of It, and only take the "end result" Into account hence deem It as no relevance to social engineering.
Simply put and In general terms, SEing Is manipulating the person on the other end Into doing something they're not supposed to do. The end result Is Immaterial. It's the methodology used to achieve the end result that's classed as social engineering.
For example:
(1). You obtain personal Information and credentials such as family names, given names, addresses, date of births, phone number,sbank account name & numbers, merchant Ids, Inter-company codes, usernames & passwords, CC numbers, CC account holder, expiration dates, CVV numbers and the list goes on.
This was performed via person-to-person contact over the phone.
The methodology used to obtain this Information, Is social engineering. Not the end result.
(2). You've been authorized access to a restricted building, bypassing the building's entry code.
This was performed by assuming the role of an employee, dressed accordingly In a suit, wearing (what appeared to be) an authenticated ID and as such, another employee left the door ajar for you and you've walked Into the building.
The methodology used to gain access to the restricted building, Is social engineering. The end result Isn't.
(3). In the case of "Amazon" on this board. The methodology used to steal the Item In question, Is classed as social engineering. The end result Is not.
Yes (where applicable), I agree It Is stealing there's no question about It, but Identifying the vulnerability(s) of the person on the other end, exploiting those vulnerabilities (hence circumventing the human firewall) and getting the person to do something they're not supposed to do (refund/replace the Item) Is social engineering. The end result Is not.
As you can see, the results of all analogies above have a different outcome. However, the key element Is the methods used to get the result- all of which pertain to social engineering.
I never actually believed what I read on the Internet about SEing. It's not only a way to steal people's personal informations, it's more about manipulating and persuading people into doing what you want them to do.
This could be classified as a science.
Really like your explanation, very clarifying for someone who is new to the subject like me.
RE: Guides or mentorship on SEing - mothered - 06-12-2018
(06-12-2018, 10:31 AM)Faxx Wrote: it's more about manipulating and persuading people into doing what you want them to do.
In a nutshell, this defines SEing.
As mentioned, the "end result" Is of no relevance. The method used to achieve the end result Is what social engineering Is all about.
RE: Guides or mentorship on SEing - Faxx - 06-12-2018
(06-12-2018, 10:47 AM)mothered Wrote:(06-12-2018, 10:31 AM)Faxx Wrote: it's more about manipulating and persuading people into doing what you want them to do.
In a nutshell, this defines SEing.
As mentioned, the "end result" Is of no relevance. The method used to achieve the end result Is what social engineering Is all about.
Can you please check your PMs too?
RE: Guides or mentorship on SEing - mothered - 06-12-2018
(06-12-2018, 10:49 AM)Faxx Wrote:(06-12-2018, 10:47 AM)mothered Wrote:(06-12-2018, 10:31 AM)Faxx Wrote: it's more about manipulating and persuading people into doing what you want them to do.
In a nutshell, this defines SEing.
As mentioned, the "end result" Is of no relevance. The method used to achieve the end result Is what social engineering Is all about.
Can you please check your PMs too?
Bear with me, I'm Inundated at the moment.