What's the best way to practice social engineering, preferably without getting arrested? I've been meaning to add it to my available skills, but you can't exactly set up a human "VM" like you can with an exploit. How about for phishing/vishing?
Practicing Social Engineering |
|
Sep 5, 2019 08:32 AM
(This post was last modified: Sep 5, 2019 08:36 AM by Venture.)
Look at small things; Social experiments, and personal Capture the flag challenges. You don't have to do something uber spooky to do it; For example; If you work at a place like lets say target; You're authorized to know the intercom extension, but customers aren't. Call a different store, and see if you can get an employee to disclose the intercom extension. It's a matter of setting an objective, and then finding a way to get there; There's really not right way to do social engineering, every experience will be different, some attempts will fail; But overall persistence, psychology, and determination as well as creativity seem to be the best.
If you want a challenge maybe try something, like for instance you don't have a girlfriend, or have social anxiety make the goal to get a girl; start studying se; if its to get a job, start looking at psychology around employers; Something thats sad that most people fail to see is that social engineering is much, much more than the aspect of "human hacking", its honestly a tool that you can use in everyday life, and is a lifestyle. You can use social engineering to change your outcomes, and possibly alter the world around you as people and their interactions are social exchanges. it is possible to use SE to befriend those in power, to get the outcomes you desire, to make honest money, to get people to like you. Social Engineering at its core is a sure fire way to hack the world around you, and should not be overlooked. Good luck boyo (Sep 5, 2019 08:32 AM)Venture Wrote: Look at small things; Social experiments, and personal Capture the flag challenges. You don't have to do something uber spooky to do it; For example; If you work at a place like lets say target; You're authorized to know the intercom extension, but customers aren't. Call a different store, and see if you can get an employee to disclose the intercom extension. It's a matter of setting an objective, and then finding a way to get there; There's really not right way to do social engineering, every experience will be different, some attempts will fail; But overall persistence, psychology, and determination as well as creativity seem to be the best. Alright, thanks a lot for your help :)
Dell, Dell, Dell.
Go to ebay find something (a monitor hint hint) acquire a number And then the rest is self explanatory. Can legal ramifications come? Sure if you are awfully silly. Use an alias Ship or do not ship to your house send it back if you are super scared This would open a door for you that some would only dream to have done.
You don't have to get arrested, do simple things is correct. I would say start by learning about how people operate, a bit of phycology another important thing is philosophy. Why philosophy? It's simple it teaches you to reason and be better in mental chess. Let me give an example, let's say that you need someone's maiden name they are in sales of a client (now a target, perhaps to reset their password you need to know the maiden name), you can look at their social media you may garner some important information on that person. Perhaps you make a call wanting to talk to them and know a few things which people do not disclose , obviously asking "Hey what's your mom's maiden name?" Is not going to be very fruitful and probably they will think you are very odd at the very least, but let's ask the question differently.
So you make the call and during the call you ask where this person is from, they say New York where in now you also claim your family is from the same location. (Yes doing your homework is important) So you ask the question in a different way "My family may know your family what was your mom's last name before she got married?" This would get the same answer but you asked it in a way where in it's not so personal. Set goals for finding out information from people perhaps you want to know the pets of people maybe you can think of other things. Either way it doesn't have to be illegal shit and doing criminal bullshit for you to hone your skills. |
|
|

