View source

__NOTOC__
=== ===
Welcome to the Social Engineering Framework.  This is a work in progress, but we feel it will contain and DOES contain some of the hottest, newest and most innovative information on the scene today.  We will be developing this framework over time and there will be more to come.  For now the Framework is below and the hyper-linked areas are the areas that are done or being worked on.  We hope you enjoy this and PLEASE feel free to send us your thoughts, additions or any feedback at all.

:- The SE Team
<br>

<div class="myNAV">'''CAUTION: This knowledge is ''NOT'' intended to teach you how to trick people, lie to others, or gain valuable items of others.  Trying to use this information without the proper practice and without proper professionalism will usually backfire.'''</div>
<br>

=== PART I: GENERAL DISCUSSION ===
: I.      [[Social Engineering Defined]]<br>
: II.     [[Categories of Social Engineers]]<br>
:: A. [[Social Engineers: Hackers|Hackers]]<br>
:: B. [[Social Engineers: Penetration Testers|Penetration Testers]]<br>
:: C. [[Social Engineers: Spies or Espionage|Spies or Espionage]]<br>
:: D. [[Social Engineers: Identity Thieves|Identity Thieves]]<br>
:: E. [[Social Engineers: Disgruntled Employees|Disgruntled Employees]]<br>
:: F. [[Social Engineers: Information Brokers|Information Brokers]]<br>
:: G. [[Social Engineers: Scam Artists|Scam Artists]]<br>
:: H. [[Social Engineers: Executive Recruiters|Executive Recruiters]]<br>
:: I. [[Social Engineers: Sales People|Sales People]]<br>
:: J. [[Social Engineers: Governments|Governments]]<br>
:: K. [[Social Engineers: Everyday People|Everyday People]]<br>
: III.    [[Why Attackers Might Use Social Engineering]]<br>
: IV.     [[Typical Goals of a Social Engineer|Typical Goals]]<br>
: V.      [[The Social Engineering Attack Cycle|The Attack Cycle]]<br>
: VI.     [[Common Social Engineering Attacks|Common Attacks]]<br>
:: A. [[Common Social Engineering Attacks: Customer Service|Customer Service]]<br>
:: B. [[Common Social Engineering Attacks: Tech Support|Tech Support]]<br>
:: C. [[Common Social Engineering Attacks: Delivery Person|Delivery Person]]<br>
:: D. [[Common Social Engineering Attacks: Phone|Phone]]<br>
: VII.    [[Real World Social Engineering Examples|Real World Examples]]<br>
:: A. [[Real World Social Engineering Examples: Con Men|Con Men]]<br>
:: B. [[Real World Social Engineering Examples: Phishing|Phishing]]<br>
:: C. [[Real World Social Engineering Examples: Politicians|Politicians]]<br>
:: D. [[Real World Social Engineering Examples: Crime Victims|Crime Victims]]<br><br>

=== PART II: INFORMATION GATHERING ===
: I.      [[How to Gather Information]]<br>
:: A. [[How To Gather Information: Research|Research]]<br>
:: B. [[How To Gather Information: Dumpster Diving|Dumpster Diving]]<br>
: II.     [[Information Gathering Sources|Sources]]<br>
:: A. [[Information Gathering Sources: Traditional|Traditional]]<br>
:: B. [[Information Gathering Sources: Non-Traditional|Non-Traditional]]<br>
: III.   [[Communication Models]]<br><br>
 
=== PART III: ELICITATION ===
: I.      [[Elicitation Defined|Definition]]<br>
: II.     [[Elicitation Goals|Goals]]<br>
: III.    [[Elicitation Preloading|Preloading]]<br>
: IV.    [[Becoming a Successful Elicitor]]<br><br>

=== PART IV: PRETEXTING ===
: I.      [[Pretexting Defined|Definition]]<br>
: II.     [[Pretexting Principles and Planning|Principles and Planning]]<br>
: III.    [[Successful Pretexting]]<br><br>

=== PART V: PSYCHOLOGICAL PRINCIPLES ===
: I.      [[Psychological Principles: Modes of Thinking|Modes of Thinking]]<br>
: II.     [[Psychological Principles: Eye Cues|Eye Cues]]<br>
: III.    [[Psychological Principles: Micro-Expressions|Micro-Expressions]]<br>
: IV.    [[Psychological Principles: Neuro-Linguistic Programming (NLP)|Neuro-Linguistic Programming (NLP)]]<br>
:: A.      [[Neuro-Linguistic Programming: Voice in NLP|Voice in NLP]]<br>
: V.     [[Psychological Principles: The Human Buffer Overflow|The Human Buffer Overflow]]<br>
: VI.      [[Psychological Principles: Interview and Interrogation|Interview and Interrogation]]<br>
: VII.     [[Psychological Principles: Instant Rapport|Instant Rapport]]<br><br>

=== PART VI: INFLUENCING OTHERS ===
: I. [[Influence Tactics]]<br>
:: A. [[Influence Tactics: Reciprocation|Reciprocation]]<br>
::: 1. [[Reciprocation: Obligation|Obligation]]<br>
::: 2. [[Reciprocation: Concession|Concession]]<br>
:: B. [[Influence Tactics: Scarcity|Scarcity]]<br>
:: C. [[Influence Tactics: Authority|Authority]]<br>
:: D. [[Influence Tactics: Commitment and Consistency|Commitment and Consistency]]<br>
:: E. [[Influence Tactics: Liking|Liking]]<br>
:: F. [[Influence Tactics: Consensus or Social Proof|Consensus or Social Proof]]<br>
: II.   [[Framing]]<br>
: III.  [[Manipulation of Incentives]]<br><br>      

=== PART VII: SOCIAL ENGINEERING TOOLS ===
: I.    [[Physical Social Engineering Tools|Physical]]<br>
:: A. [[Physical Social Engineering Tools: Lock Picking and Shims|Lock Picking and Shims]]<br>
:: B. [[Physical Social Engineering Tools: Cameras|Cameras]]<br>
:: C. [[Physical Social Engineering Tools: GPS Tracker|GPS Tracker]]<br>
:: D. [[Physical Social Engineering Tools: Pen Recorder|Pen Recorder]]<br>
:: E. [[Physical Social Engineering Tools: RF Bug Kits|RF Bug Kits]]<br>
: II.   [[Computer Based Social Engineering Tools|Computer Based]]<br>
:: A. [[Computer Based Social Engineering Tools: Maltego|Maltego]]<br>
:: B. [[Computer Based Social Engineering Tools: Maltego Mesh|Maltego Mesh]]<br>
:: C. [[Computer Based Social Engineering Tools: Social Engineer Toolkit (SET)|Social Engineer Toolkit (SET)]]<br>
:: D. [[Computer Based Social Engineering Tools: Common User Passwords Profiler (CUPP)|Common User Passwords Profiler (CUPP)]]<br>
:: E. [[Computer Based Social Engineering Tools: Who's Your Daddy Password Profiler (WYD)|Who's Your Daddy Password Profiler (WYD)]]<br>
: III.  [[Phone Based Social Engineering Tools|Phone]]<br>
:: A. [[Phone Based Social Engineering Tools: Caller ID Spoofing|Caller ID Spoofing]]<br><br>

=== PART VIII: SOCIAL ENGINEERING EXTRAS AND RESOURCES ===
: I. [[Social-Engineer.org In The Media]]<br>
<br>