+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: new to social engineering (/Thread-new-to-social-engineering)
new to social engineering - ghostheadx9 - 09-16-2018
So how do I practice human manipulation? Where do I begin?
I mean, how do I get good IRL practice? I am pretty confident I am ready to start. My social skills are generally pretty good, not perfect, but decent.
RE: new to social engineering - mothered - 09-16-2018
Do what I like to call "practice runs".
It's a simulated-like attack, whereby you research your target, formulate and prepare your method based on your findings and execute your attack (on your target) thereafter. It Is not the real deal. The objective Is to establish how they operate Internally, the questions asked, how they expect to be answered and most Importantly, the vulnerabilities of the representative(s).
Repeat the process on various organizations- to get the experience, confidence and skill set In preparation for your real SE.
RE: new to social engineering - ghostheadx9 - 09-16-2018
(09-16-2018, 09:03 AM)mothered Wrote: Do what I like to call "practice runs".
It's a simulated-like attack, whereby you research your target, formulate and prepare your method based on your findings and execute your attack (on your target) thereafter. It Is not the real deal. The objective Is to establish how they operate Internally, the questions asked, how they expect to be answered and most Importantly, the vulnerabilities of the representative(s).
Repeat the process on various organizations- to get the experience, confidence and skill set In preparation for your real SE.
Thanks. This makes sense.
RE: new to social engineering - mothered - 09-16-2018
(09-16-2018, 09:22 AM)ghostheadx9 Wrote:(09-16-2018, 09:03 AM)mothered Wrote: Do what I like to call "practice runs".
It's a simulated-like attack, whereby you research your target, formulate and prepare your method based on your findings and execute your attack (on your target) thereafter. It Is not the real deal. The objective Is to establish how they operate Internally, the questions asked, how they expect to be answered and most Importantly, the vulnerabilities of the representative(s).
Repeat the process on various organizations- to get the experience, confidence and skill set In preparation for your real SE.
Thanks. This makes sense.
You're welcome.
To this day, I still do It when SEing companies I've yet to deal with. It provides a very good Insight of how they're structured, what they do/do not accept as a whole and basically allows to Identify their Insecurities. It's simply a fictitious SE In preparation for the real one.
RE: new to social engineering - Cr3aTor - 09-16-2018
(09-16-2018, 09:03 AM)mothered Wrote: Do what I like to call "practice runs".I couldn't say it better !
It's a simulated-like attack, whereby you research your target, formulate and prepare your method based on your findings and execute your attack (on your target) thereafter. It Is not the real deal. The objective Is to establish how they operate Internally, the questions asked, how they expect to be answered and most Importantly, the vulnerabilities of the representative(s).
Repeat the process on various organizations- to get the experience, confidence and skill set In preparation for your real SE.
However in addition to what was said above, I wanted to say that you could also practice on your friends, family, etc (of course with no harm) . Learn psychology and try to induce some reactions, behavior, feelings, etc of your target. Make him/her think something about you while you are gathering other details about them. Analyze, observe and be vigilant of your surroundings. Or even try to get into a place where you don't belong by pretending to be someone else, basically something like @mothered said. (a school, in a kitchen of a restaurant, etc)
I think that if you know how humans react, feel and behave in general, SE is not that hard.
RE: new to social engineering - mothered - 09-16-2018
(09-16-2018, 11:35 AM)Cr3aTor Wrote: I wanted to say that you could also practice on your friends, family, etc (of course with no harm) .
Learn psychology and try to induce some reactions, behavior, feelings, etc of your target. Make him/her think something about you while you are
I think that if you know how humans react, feel and behave in general, SE is not that hard.
These are very valid points.
Having the ability to Identify the thoughts of others In every mental capacity, Is extremely Important. The above elaborates on that perfectly.
RE: new to social engineering - karoloydi - 09-16-2018
(09-16-2018, 08:42 AM)ghostheadx9 Wrote: So how do I practice human manipulation? Where do I begin?
I mean, how do I get good IRL practice? I am pretty confident I am ready to start. My social skills are generally pretty good, not perfect, but decent.
If you are interested in getting free stuff, try SEing first things you actually own. This will get the paranoia out of the way and give you more confidence when talking to the reps. If you own some logitech products start from there.