Penetration Testing mailing list archives

Re: Social Engineering ... ?


From: richardw <richardw () area52 allserve net>
Date: Tue, 23 Nov 2004 09:35:38 -0600


So true - the Feds have been dumpster diving and going through people's trash long before the nice folks at Defcon were.

Salespeople too - I worked at a company where one of my peers was having a hard time get a big order for networking equipment, so the bribed the customer's assistant to login as the customer and enter the P.O. Of course the assistant cracked and she eventually got fired, but she got her huge bonus for making the sale.

Maybe a some psychology courses, not necessarily a full-blown four year undergrad program, might be an option as well?

Rob Shein wrote:
In truth, I wouldn't focus necessarily on it from a geek perspective...I'd
look at it from the standpoint of those who do nothing BUT social engineer,
without the other technical aspects.  This would be sales techniques, and
the methods of grifters, confidence men and intelligence officers.  The last
category is probably a bit harder to get information on, but there are a lot
of things out there both in the worlds of fiction and non-fiction to get you
going on the rest.


-----Original Message-----
From: Bones [mailto:the.bones () gmail com] Sent: Monday, November 22, 2004 5:12 PM
To: pen-test () securityfocus com
Subject: Social Engineering ... ?


I am sure this has been asked here several times before, but if everyone could indulge me I would be grateful.

I am trying to find some good resources for social engineering methodologies and such performed as part of pen-test work.

Books, links, previous SF posts (date/subject) etc. are all welcome.

Thanks all,

Bones
the.bones-at-gmail.com






Current thread: