Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 81 guests and 1 member online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Social Engineeringarrow I would like to hear from people who actually use social engineering in theirjob
EH-Net
May 26, 2012, 07:32:13 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: I would like to hear from people who actually use social engineering in theirjob  (Read 6072 times)
0 Members and 2 Guests are viewing this topic.
YuckTheFankees
Sr. Member
****
Offline Offline

Posts: 276


View Profile
« on: October 11, 2011, 12:50:02 AM »

I would like to know how you prepped for the social engineering and maybe an example of one you have completed. thank you!
Logged

Let's go Red Wings!
lorddicranius
Sr. Member
****
Offline Offline

Posts: 396



View Profile WWW
« Reply #1 on: October 11, 2011, 01:10:30 AM »

I don't use it in my own job, but Matias Brutti and Mike Ridpath of IOActive did a presentation here at B-Sides PDX this last weekend on how they use SE, along with recordings of calls they've done on the job:

http://www.ustream.tv/recorded/17736407

Jayson Street did his "Steal everything, kill everyone, cause total financial ruin" talk at DerbyCon two weekends ago about his use of SE during his night job:

http://www.youtube.com/watch?v=8esU0G5zlRU
Logged

YuckTheFankees
Sr. Member
****
Offline Offline

Posts: 276


View Profile
« Reply #2 on: October 11, 2011, 08:51:33 AM »

That's some good stuff, thanks a lot!
Logged

Let's go Red Wings!
Jamie.R
Hero Member
*****
Offline Offline

Posts: 626



View Profile WWW
« Reply #3 on: October 12, 2011, 04:13:44 AM »

There is also a really good book on SE called hacking the human.
Logged

OSWP | eCPPT | HackingDojo Nidan
www.jamierougive.co.uk
YuckTheFankees
Sr. Member
****
Offline Offline

Posts: 276


View Profile
« Reply #4 on: October 12, 2011, 08:43:27 AM »

Is that a newer book?
Logged

Let's go Red Wings!
Jamie.R
Hero Member
*****
Offline Offline

Posts: 626



View Profile WWW
« Reply #5 on: October 13, 2011, 05:13:48 AM »

its pretty new here link on amazon http://www.amazon.co.uk/Social-Engineering-Art-Human-Hacking/dp/0470639539/ref=sr_1_3?ie=UTF8&qid=1318500808&sr=8-3
Logged

OSWP | eCPPT | HackingDojo Nidan
www.jamierougive.co.uk
YuckTheFankees
Sr. Member
****
Offline Offline

Posts: 276


View Profile
« Reply #6 on: October 13, 2011, 09:07:04 AM »

Okay cool. I've seen that book a couple of times on Amazon, I'll have to double check if safari books has it Grin. I've read one SE book and it was really interesting. The author would start with his story and after the 1st page I would try and guess what kind of information he was going after but I was never right. He would go 5 steps to the left just to get a little piece of information, then do something else where I was like " how does this relate at all"..then BAM he finally tells us what he was doing and it all made sense. I feel like SE is almost impossible to stop if someone plans the SE well enough.
Logged

Let's go Red Wings!
OneManicNinja
Newbie
*
Offline Offline

Posts: 1


View Profile
« Reply #7 on: November 15, 2011, 04:00:13 PM »

if Social Engineering is defined as "an interaction with a person that causes them to give you information that may not be in that person's best interest but is used to benefit the person asking"  (and imho this is a good definition)  then technically, no, i don't use it. I don't interact with them until i return their call/e-mail.

That said, when people contact me to hire me, I have a whole series of things i do to investigate them before I accept or reject a job. For the most part i want to make sure that I'll be in a safe situation, but it's also good to find out whether they can afford me!  Wink 

Also, finding out as much as i can helps me to make sure I offer them what they're looking for.  I always say that "affordable is relative" because what one guy would pay $100 for, another guy might pay $1000.  The second guy is expecting a certain level of service, and think that $100 is too cheap. My approach is to accept more clients that would be fine with paying $1000, and make sure those folks felt like they got a good deal.

Kind of a roundabout way of answering your question but i hope that helps.
Logged
jibudada
Guest
« Reply #8 on: May 19, 2012, 04:17:40 AM »

if Social Engineering is defined as "an interaction with a person that causes them to give you information that may not be in that person's best interest but is used to benefit the person asking"  (and imho this is a good definition)  then technically, no, i don't use it. I don't interact with them until i return their call/e-mail.

That said, when people contact me to hire me, I have a whole series of things i do to investigate them before I accept or reject a job. For the most part i want to make sure that I'll be in a safe situation, but it's also good to find out whether they can afford me!  Wink 

Also, finding out as much as i can helps me to make sure I offer them what they're looking for.  I always say that "affordable is relative" because what one guy would pay $100 for, another guy might pay $1000.  The second guy is expecting a certain level of service, and think that $100 is too cheap. My approach is to accept more clients that would be fine with paying $1000, and make sure those folks felt like they got a good deal.

Kind of a roundabout way of answering your question but i hope that helps.













Social Engineering is defined as the process of deceiving people into giving away access or confidential information. Wikipedia defines it as: "is the act of manipulating people into performing actions or divulging confidential information. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access; in most cases the attacker never comes face-to-face with the victim."[1] Although it has been given a bad name by the plethora of "free pizza", "free coffee", and "how to pick up chicks" sites, aspects social engineering actually touches on many parts of daily life. Many consider social engineering to be the greatest risk to security.[2]


http://www.securitytube.net/tags/social%20engineering


Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.075 seconds with 20 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.