Social Engineering IRC Lecture

jake_johnson · Posted: Mon, 05 Sep 2005 18:16:28 Post Subject: Social Engineering IRC Lecture

For a forum called ASO I was asked to do a IRC lecture. Me and a member called uminashoe (I know, he has a funny name, point and laph at him) will hold it.
time: Monday 9/12/05 at 17:00 Eastern Time (5:00pm for you idiots)

server: anomalous-security.org
channel: lecture

*Yes i know social engineering has little to do with this site. And why am I posting in marketplace, I am a salesman in a way. I am trying to sell you the oportunity to join us in a chance to furthur you knowlege. The price is your time.*

knight0334 · Posted: Mon, 05 Sep 2005 19:09:48 Post Subject:

Interesting.. You should see me there, as long as my memory doesn't let me down.

**JimBowy** · Moderator Joined: 02 Aug 2003 Posts: 1627

well, paste the transcripts here so the slow ppl can still get an education.

BeerCheeze · Posted: Mon, 05 Sep 2005 22:33:37 Post Subject:

Just wondering.... what are your "credentials"?

jake_johnson · Posted: Tue, 06 Sep 2005 10:23:48 Post Subject:

credentials.

Formal, 6 months of acting classes
a few psychology classes

informal.
People watching
Personal love and study of Neuro Linguistic programing
Going out in the world and practicing this stuff on a regular basis

Remember social engineering is basicly a con man who puts a little more thought into the process. YOu are basicly selling a fake image in order to aquire what you want at a discounted, free, or other wise what would be un atanable through normal means of comunication.

Basic outline as I am thinking now. (Not set in stone and will be adding some more)

-start off with a basic definition
-then explain direct request and contrived situation
-Some basic acting tips
-Interpretation and disguise
-Why apearence is important
-Why coke is better then pepsi
-Reserching people
-----How to use the internet to aide in reserching the busisnes and/or person who is your mark
-----Then a brief thing on why dumpster diving is very important
-----Basics of phone tapping
-Then some stories and basic examples on some simple jobs then some on more complex jobs

We will answer questions after each section. Which will hopefully go into more conversation and ideas.

I am debating if I should disguess the basics of triggers and NLP. I have been advised that it may be to advanced for the first one and to just disguess them in a later article or something. I will probably have more topics then what was listed.

I am by no means the official best person or anything about social engineering (glorified con man). Its just something that I am mostly self taught about and have practiced. I was simply asked to do the lecture. The paired me with the gentlemen that I have never met. He lives in UK somewhere. I agreed. I wish to see a big crowd. But if there is only one person there, i will still give it. Purpose of having two people is two different experiences that way more will be covered. ANd a audience to ask questions to get us to cover areas we might not other wise cover. THen this can later be turned into an article/tutorial/white paper, or somen.

BeerCheeze · Posted: Tue, 06 Sep 2005 16:47:39 Post Subject:

Yea, I'm 100% aware of what Social Engineering is. Being that I am a Certified Information Systems Security Professional, as well as working in IT and pursuing other IT security credentials. So hopefully you don't get offended when I say, you aren't qualified. Can't comment on the other person of course.

dadx2mj · Posted: Tue, 06 Sep 2005 17:04:33 Post Subject:

So let me get this straight...you are giving a lecture on how to be a BS'er and a con man? Now there is something to make your momma proud. I think I have to agree with EC on this one. Yikes

knight0334 · Posted: Tue, 06 Sep 2005 19:04:22 Post Subject:

as long as I learn something I'll be happy.

....now mind you, I'm a communications engineer with 17 years experience. I also designed and run a broadband ISP. ....along with nearly 23-24 years of PC experience.

So if I dont learn something, I'm gonna hose your servers from the outside and show you something about security. muhahahaha ...j/k

edvallie · Posted: Tue, 06 Sep 2005 20:24:50 Post Subject:

Anyone else ever read Kevin Mitniks - Art of Deception?

Really interesting read about social engineering.

BeerCheeze · Posted: Tue, 06 Sep 2005 20:36:52 Post Subject:

No, I never read his book. I have moral issues with rewarding someone like him.