+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Social Engineering Tactics (/showthread.php?tid=6144822)
Social Engineering Tactics - S@Msepiol - Mar 16, 2021
Let's share some some new and good Social engineering tactics for various types of attacks.
Let me give you one for Facebook hack.
How to hack Facebook with social engineering?
you need to have:
1. victims phone number
2. Email or username
enter the username or email of the victim you want to hack
click on forgot password
then click on send me a verification code
now just go a to website called textfree.us to send free text messages
and forge a message so that victim end up giving you the Verification code
something like " Some suspicious activity is recorded on your Facebook account please verify your account by replying this essage with the Verification code sent to you (note - do not copy paste the whole message). Not replying with the code can deactivate your account"
and if you have victims email address
then send a forged email address which supports the message you just given
something like " Suspicious activity recorded on your Facebook account respond with the message we send to your connected mobile number" and obviously make a fake email address for this name email something similar to facebbok with a typo error
like fceabook or @dminFaecbook
that's one way to phish the verification code
Let's discuss some more social engineering tactics..........feel free to point out any fault in the above tactic.
RE: Social Engineering Tactics - Void - Mar 16, 2021
That’s pretty simple way that might work out. I do believe most people are smart enough not to fall for these fake messages nowadays though. Good share though!
RE: Social Engineering Tactics - Geppetto - Mar 17, 2021
(Mar 16, 2021 02:39 AM)S@Msepiol Wrote: Let's share some some new and good Social engineering tactics for various types of attacks.
Let me give you one for Facebook hack.
How to hack Facebook with social engineering?
you need to have:
1. victims phone number
2. Email or username
enter the username or email of the victim you want to hack
click on forgot password
then click on send me a verification code
now just go a to website called textfree.us to send free text messages
and forge a message so that victim end up giving you the Verification code
something like " Some suspicious activity is recorded on your Facebook account please verify your account by replying this essage with the Verification code sent to you (note - do not copy paste the whole message). Not replying with the code can deactivate your account"
and if you have victims email address
then send a forged email address which supports the message you just given
something like " Suspicious activity recorded on your Facebook account respond with the message we send to your connected mobile number" and obviously make a fake email address for this name email something similar to facebbok with a typoerror
like fceabook or @dminFaecbook
that's one way to phish the verification code
Let's discuss some more social engineering tactics..........feel free to point out any fault in the above tactic.
Yes this may not work these days but it used to people are getting smarter good post thought
RE: Social Engineering Tactics - S@Msepiol - Mar 18, 2021
Let's take an another tactics
Social engineering is based on some human emotions
Like we can use curiosity or fear or something like that that will tell a victim to fall for the phishing bait or whatever we want them to do
Let me take an example of how to use fear for this .
If i just craft a message with a totally private number which do not connect to me and send it to victim
The message goes like
"I just hacked you instagram or lets say gmail account password and change all the information so that you dont get notification if you dont think i am telling truth try by log in with this link and check if you can login" now add some more fear so that victim falls for the trap...
I believe that most of the people who are new to cybersecurity or hacking or dont know a shit about it will definitely fall for this
RE: Social Engineering Tactics - kirmacoea - Mar 20, 2021
There is some spoof call apps which can make call to anyone using any number.
I tested some of app using free credits, and just made miss call my friend, using his wife number.
Do imagine what you can do 😌
RE: Social Engineering Tactics - Void - Mar 20, 2021
(Mar 20, 2021 04:21 AM)kirmacoea Wrote: There is some spoof call apps which can make call to anyone using any number.
I tested some of app using free credits, and just made miss call my friend, using his wife number.
Do imagine what you can do 😌
Was it spoofcard you used? I’ve always wanted to try that app but it has some pretty bad reviews.
RE: Social Engineering Tactics - kirmacoea - Mar 20, 2021
(Mar 20, 2021 04:04 PM)Void Wrote: Was it spoofcard you used? I’ve always wanted to try that app but it has some pretty bad reviews.
There is several apps can find in app store, but i used free credits on it, its can buy credits if you need ( that’s actually app purpose)
When install app new, its give some free credits to check it. So I tested that way.
I have no idea how can spoof call id, may be there is better way to do it.
RE: Social Engineering Tactics - S@Msepiol - Mar 21, 2021
(Mar 20, 2021 07:31 PM)kirmacoea Wrote: There is several apps can find in app store, but i used free credits on it, its can buy credits if you need ( that’s actually app purpose)
When install app new, its give some free credits to check it. So I tested that way.
I have no idea how can spoof call id, may be there is better way to do it.
I have also used some spoof call application some of them also come with voice changer.
But a good spoof call application is hard to find
RE: Social Engineering Tactics - Warlock_wraith_07 - Apr 1, 2021
(Mar 21, 2021 02:12 AM)S@Msepiol Wrote: I have also used some spoof call application some of them also come with voice changer.
But a good spoof call application is hard to find
Well I can teach you though, how to spoof calls easily without credit 🙂
RE: Social Engineering Tactics - SIM-4574945 - Apr 5, 2021
I always reccomedend this trick, because it brings much results than other techniques like "password harvesting attack". Anyhow, the text of the message looks good, but another sample would be more appropriate. Your test is a bit long.
I would write: "There's been a suspicious activity on your Facebook account. Please verify your account by replying this message with the verification code sent to your mobile device"
Or: "There's been a suspicious activity on your Facebook account. Please respond with your verification code to help secure your account"
I don't suggest using a voip number, but a real one. Feel free to answer me if you need further tips about.
RE: Social Engineering Tactics - S@Msepiol - Apr 14, 2021
(Apr 1, 2021 06:51 AM)Warlock_wraith_07 Wrote: Well I can teach you though, how to spoof calls easily without credit 🙂
Tell us