
Social Engineering is for me, one of the best ways to get informations about people !
but what is it ?
Social engineering cannot be describe without talking about Kevin Mitnick http://en.wikipedia.org/wiki/Kevin_Mitnick
It’s the art of talking to someone and obtain informations or acces to something.
Yesterday i went to see someone to the hospital … i wanted to know about his state before going to see him, i went to the doctors room and asked them
some informations about Mr X … they just asked me if i was from the family … and ABSOLUTLY NOT !
I talked 10 minutes with the doctor and got a copy of the admission documents from Mister X …. it was so easy !
I gave all those documents to Mr X … he was happy to get is own admission documents.
People are weakneses for other people ….
Another example can be, I want to get some informations about a company ( This is totally factice ! )
The first part of my job will be
1# analyse employees
2# analyse Directors
3# Keep everything in mind about them
Imagine a Company called XYZ i need informations for a client !
First day :
I analyse Directors … where are they living ?, Which kind of Hobbies ? Wifie ? Single ? Childs ?
I’ll do that until i know everything !
Next Days :
Employee analyse ( i’ll do the same )
Bob, Alice, Jhon
Bob … is single … he likes money and wives … he drink alone in a pub after work … bob has an important job in this company …
Alice … Has a child … this child is sick … she need money to help her child …. but she is only cleaner in the company
Jhon … has everything he need !
… as you can see we are going to choose hour targets Bob and Alice !
Next Morning …. Bob will meed a beautifull wife in the pub … bob .. will fall in love … and she will present us to bob …
Her friends … and Bob will listen to us by love to his new girlfriend … ( this part can take a month ! )
Next Moring we will wait Alice … and ask her documents who are in the trashbins against money !
each important documents can be paid from 10$ until 200$ ( we will insist on the Sick point from her child )
This can be a nice social engineering work !
there are many ways to use social engineering !
Posted in Security