Social Engineering The Dark Art - Dc404.com

cribabsurdElectronics - Devices

Nov 27, 2013 (3 years and 9 months ago)

62 views

dc_404

social engineering

the dark art


dc_404

social engineering defined

b
eyond the
d
ictionary

dc_404

social engineering defined

beyond the dictionary

social engineering is…


an attack on the trust relationships and processes of an
organization designed to grant unauthorized privilege or
access to the attacker.

dc_404

social engineering defined

beyond the dictionary

social engineering is…



an attack on the human firewall.

dc_404

social engineering defined

beyond the dictionary

social engineers use…



small pieces of information,


repeated attacks,


multiple techniques,


technology for assistance and


good social skills


to break in.

dc_404

methodology

lather, rinse, repeat

dev

execute

analysis

recon

dc_404

methodology

lather, rinse, repeat

dev

execute

analysis

recon

dc_404

dc_404

dc_404

dc_404

reconnaissance

dial for dollars

interactive recon


reach out and fist someone

dc_404

reconnaissance

executive vainglory

dc_404

reconnaissance

tom is your fiend

site:linkedin.com

-
dir
inurl:pub

“company"

site:facebook.com

“company"

site:facebook.com

“person"

site:monstercom

“company"

weakest link in the chain

monster

bait

dc_404

reconnaissance

I am from the government and I’m here to help

http://www.fec.gov/finance/disclosure/advindsea.shtml

dc_404

reconnaissance

with vendors like these…

dc_404

reconnaissance

my other
google

is
maltego

dc_404

the art of disguise

incognito is not a
ludacris

album

dc_404

janitors

maintenance people

delivery personnel

contractor

the invisible man

the art of disguise

dc_404

the art of disguise

all for one and one for fail

it guy

corporate lackey

“new guy”


dc_404

the art of disguise

props and toys that don’t ship in a brown wrapper

computer gear

id badge

work order

clipboard

portable media


dc_404

the art of disguise

pretext calling

spear phishing

social networks

on the internet nobody knows you’re a god

dc_404

the art of disguise

email

caller id

rfid

sufficiently advanced technology is indistinguishable from magic

dc_404




appeal to authority

getting what you want

sycophants make great minions

dc_404




appeal to authority

plea for help

getting what you want

cute puppy
-
dog eyes

dc_404




appeal to authority

plea for help

offer of help

getting what you want

white knight security

dc_404




appeal to authority

plea for help

offer of help

developing rapport

getting what you want

friends don’t let friends get social engineered

dc_404




appeal to authority

plea for help

offer of help

developing rapport

name dropping

getting what you want

let someone else create the sycophant for you

dc_404




appeal to authority

plea for help

offer of help

developing rapport

name dropping

getting what you want

where there’s a will there’s a way

dc_404

dc_404

typical scenario

what does an attack look like?

corporate
headquarters, this
is
judy

avalon
. how
may
i

direct your
call.

dc_404

typical scenario

what does an attack look like?

dc_404

Typical Scenario

What Does an Attack Look Like?

dc_404

Typical Scenario

What Does an Attack Look Like?

dc_404

typical scenario

what does an attack look like?

dc_404

typical scenario

what does an attack look like?

dc_404

typical scenario

what does an attack look like?

dc_404

typical scenario

what does an attack look like?

dc_404

typical scenario

what does an attack look like?

dc_404

tha

art of
storytellin



your turn