SE

Search for:


Archive for November, 2010

The Social Engineering Stack Overflow

Monday, November 22nd, 2010

Robin Dreeke is back with another exciting chapter in the story of Steve and John. This week we look at how social engineers stack talents and methods:

Social Engineers “Stack” Techniques for Effectiveness
When we last left our story, Steve had taken some time to continue to lower John’s defensive shields by using validating statements and displaying non-threatening demeanor. Steve then used the elicitation technique of

stack overflow at line 0 tshirt p235004049708711467trlf 400 The Social Engineering Stack Overflow“bracketing” and obtained John’s salary. John’s next task is to obtain the contract bid amount from John. Steve will also attempt to ascertain John’s date of birth. Steve will ascertain this sensitive information without asking direct alerting questions. Steve will utilize intentional misstatements, bracketing, and quid-pro-quo to obtain the information. The use of multiple techniques is known as stacking (Nolan, 1999).

Background
Following the conversation the two had concerning where John was staying, his position, and salary, Steve quickly moved the dialogue onto a much less threatening topic. Steve leaned in closer to John and asked him for his opinion. Steve said that his wife’s birthday was coming up and wanted to get her a really special gift. She was turning 40 and he wanted her to feel good about herself. Steve went on to say that she had gotten him a really nice fishing pole that he could use with his son last summer. Steve continued that it was easy, because his birthday was in the summer. Steve’s wife’s birthday was in the winter and he was at a bit of a loss. John responded that his birthday was in the winter also, but that his wife had gotten them dancing lessons one year that they really enjoyed. Steve responded that it was an excellent idea and inquired whether John was one of those unfortunate few that had his birthday during Christmas. John replied that he didn’t, it was on December 15th, but his wife’s was on Valentine’s Day. John lamented the Valentine’s Day birthday challenge. Through the course of the next few minutes, Steve and John discussed how long John and his wife had been married and how old they were when they got married. John was thoroughly enjoying his conversation and the flight was going by quickly.
(more…)

Creating Connections To Persuade Your Targets

Tuesday, November 2nd, 2010

Robin joins us a third time to discuss a very hot topic on how to create amazingly strong connections as a social engineer.

making connections Creating Connections To Persuade Your TargetsThe initial steps of lowering an individual’s guard by being non-threatening and gift giving was discussed in the last two postings. Once a Social Engineer recognizes that they have effectively lowered an individual’s guard, they will utilize their selected elicitation theme and chosen technique. Nonverbal openness is the best indicator that the individual’s guard is down (Navarro, 2008). A slight head tilt, palms up, and subtle eyebrow flashes are just a few open gestures an individual can make to appear non-threatening. The theme selected will reinforce the “safe” environment that the SE has created. It can often be a topic such as a spouse’s birthday or anniversary. Utilizing these types of themes lets the other individual know that there is no romantic motive for the dialogue, thus keeping the targets guard down. This theme is also very effective because it will be a natural lead into the elicitation technique of flattery and sympathy. Additionally, this theme can easily play on the human characteristic of wanting to share an opinion and be an authority (Nolan, 1999).

Background
When we left our story in the last posting, Steve had just given up his overhead bin space on the aircraft for John. Steve had taken out his own bag and brought it up to the flight attendant to check for him. When Steve returned to his seat, John stood up, smiled and offered his hand as he thanked him for the gracious act.

Steve was demonstrating non-threatening behavior by having his head tilted slightly to the side and a pleasant smile. He displayed his openness with ventral-displays in his clothing, such as open collar and slightly cuffed sleeves.  Whenever John or a flight attendant regarded or addressed Steve, he gave affirmative head nods and eyebrow flashes to further demonstrate his nonthreatening demeanor (Navarro, 2008). Steve also was exercising reciprocal altruism or “gift giving”. John felt secure and had a desire to return the earlier kindness of Steve (Burnham & Phelan, 2001).

(more…)




SE Polls

SE CTF

Brad Smith