Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 35 guests and 1 member online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Social Engineering
Ethical Hacker Community Forums
December 03, 2008, 01:57:29 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: 1 [2]   Go Down
  Print  
Author Topic: Social Engineering  (Read 3907 times)
0 Members and 1 Guest are viewing this topic.
RoleReversal
Sr. Member
****
Offline Offline

Posts: 469


View Profile WWW
« Reply #15 on: March 18, 2008, 08:48:21 AM »

i can lie my ass off in an email though :-)

LOL!  Grin
Logged

A little bit of sanity:
http://www.infosanity.co.uk
Bogwitch
Newbie
*
Offline Offline

Posts: 48

Senno Ekto Gamat


View Profile
« Reply #16 on: March 18, 2008, 10:18:03 AM »

Dean,

I agree with you that social engineering is a valid attack vector (and often the most effective).

However, I think the initial comments (at the very least my own, but I thought others felt the same way) was that SE was something that wasn't enjoyed. For myself this is largely a confidence issue, I'm not a 'people person' therefore trying to convince someone I'm something I'm not is something I don't relish.

I do enjoy the non-interactive, techinical social engineering techniques however and have used dummy sites and spear-phising as an alternative. Following this thread I'm looking forward to testing what happens when I 'lose' a USB stick, thanks for the advice you gave njemjy regarding msfpayload as this should come in useful in this regard.

From those that are skilled at/enjoy social engineering, do you have any advice on how to best introduce yourself into a client's environment? I can't imagine anyone believing my cover stories, would you trust a nervous sweating bloke with your server room? Wink

Maybe I'm strange but I quite enjoy the SE side. Maybe it's because I come from a service background and enjoy meeting the customers.
Maybe it's because I blend well and I don't believe I look like your stereotypical computer geek or computer security geek - that makes it easier.

But the general comments here are correct - SE is probably the easiest way to get into a system or at least to get close enough to get into a system!

As for getting into a client site, don't aim for the server room. Aim for other parts of the organisation and include the server room if necessary. If you can get access to a live network port, you're 90% there anyway.
Sometimes, using a toilet just off reception can get  you the access you need - you might be suprised the route ethernet cables take - access is often just a ceiling tile away...

Logged

CISSP, C|EH, C|HFI
mambo
Newbie
*
Offline Offline

Posts: 12


View Profile
« Reply #17 on: March 18, 2008, 01:59:22 PM »

Thanks guys, glad you enjoyed it.

But for those people who do not enjoy the SE side of it because they have to talk to people, this article kin of proves to me that its not all about talking to the customer and trying to get there password, using this method the dont even need to talk to the staff.
Logged
dean
Full Member
***
Offline Offline

Posts: 130


View Profile
« Reply #18 on: March 18, 2008, 03:14:12 PM »

Not all SE requires either phone or face to face contact but if it's required then either hire someone or work on those people skills. If speaking to strangers or in public is an issue I would suggest starting to do presentations to your work colleagues about topics you have confidence in. This will get you comfortable speaking in front of people. Move on to doing presentations in your local infosec chapters (ISSA, ISACA, etc). It teaches you how to prepare and stick to a script and to have responses for possible questions that might be asked.

Even if you choose not to actually interact with a user directly and decide on the email/website route for SE attacks you will still need to make sure that the emails/websites are well written and convincing, that they have the correct layout and graphics. ie: all links work, images/company colors are correct. This is just as difficult (or easy) as standing in front of a real, live person.

If you're not comfortable in front of people how do you present to a room full of clients about the results of the pentest? That aspect of being a pentester is as important, if not more so than being technically proficient.

dean
Logged

<script>alert('%52%54%46%4D')</script>
RoleReversal
Sr. Member
****
Offline Offline

Posts: 469


View Profile WWW
« Reply #19 on: March 18, 2008, 04:02:05 PM »

I would suggest starting to do presentations to your work colleagues about topics you have confidence in. This will get you comfortable speaking in front of people.

...

If you're not comfortable in front of people how do you present to a room full of clients about the results of the pentest? That aspect of being a pentester is as important, if not more so than being technically proficient.

I think you hit the nail on the head, confidence for me (or lack of it) is the key to doing whats needed. Stick me in a room full of suits and directors and I'll quite happily discuss a vulnerability in layman's terms. Stick me on the phone to a security guard to convice him that "the BLT drive on my computer just went AWOL" and it's a whole different ball park  Wink
Logged

A little bit of sanity:
http://www.infosanity.co.uk
njemjy
Newbie
*
Offline Offline

Posts: 2

If you dont know where its been, dont stick it in.


View Profile
« Reply #20 on: March 19, 2008, 02:38:30 AM »

Quote
use ./msfpayload to generate a self contained executable. You can use any of the metasploit payloads for this. Obviously if you choose to use the connect back option you had better have something listening. use the multi/handler opiton.

@ dean -- Thanks for the info...
Logged

njemjy
CISSP-ISSEP
shawal
Jr. Member
**
Offline Offline

Posts: 86


View Profile
« Reply #21 on: March 19, 2008, 10:46:16 AM »

Nice one Mambo  Grin
Dean, very well said.
In the penetration testing world, everyone will have an area of strength, and another area of weakness. that's why it is always better to have a team to complement each others skills. I find SE, and DOS are the least of my interests, as what triggers me more is the technical side of it, and most of DOS/DDOS are not that challanging enough/interesting enough for my appetite. however if this is part of the job then it has to be done, and it has to be done carefully within the scope of work requested, and the scope of legal righst of all parties involved.
Logged

RHCE, GIAC GCIH.
sgt_mjc
Full Member
***
Offline Offline

Posts: 158


View Profile
« Reply #22 on: March 19, 2008, 01:45:58 PM »

Dean,

I think you are right on with the SE and in getting comfortable with presenting. I'm lucky enough to be in a job where presenting is a recurring theme. I got to go to a conference that was primarily for the powers that be in the Air Force enlisted aviation community to brief on the policies and procedures here at the Community College of the Air Force. Every one in that room out-ranked me. One of the things that helped me get through was the knowledge I had of our procedures as well as some of the prep I did before going down there with people that had done these conferences for their career fields (MOS in Army talk). Being prepared for a presentation is by far the best confidence booster you can have. That and surviving a room full of folks that have been giving each other a hard time all week long before you get up to speak.
Logged

Mike Conway
CompTia Security +
C|EH
Pages: 1 [2]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.06 seconds with 22 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.