___________________________________________________________________________ |\\\\\\\\\\\\\\\\-----The Social Engineering Handbook-----////////////////| |////////////////------By Sirkuit and Phrantic Anima------\\\\\\\\\\\\\\\\| |||| |||| |||| "That which thinks shall not be infected" -Sirkuit, 1998 |||| |||| |||| |||| You can't expel the machine, but you can maniplulate and resist |||| |||| |||| |\\\\\\\\\\\\\\\\ Version 1.0 ////////////////| |----------------<--------------------------------------->----------------| |//////////////// http://n0p.crashcentral.com \\\\\\\\\\\\\\\\| --------------------------------------------------------------------------- ---|Table Of Contents|--- PREFACE: Introductions to Social Engineering CHAPTER 1: Physiognamy CHAPTER 2: Nuero Linguistics -SECTION 1: Saying What They Want To Hear -SECTION 2: How To Lie -SECTION 3: Changing The Subject CHAPTER 3: Gathering Information -SECTION 1: Watching People -SECTION 2: Shoulder Surfing -SECTION 3: Dumpster Diving CHAPTER 4: In Your Face Engineering -SECTION 1: Becoming Someone Else -SECTION 2: Dressing For The Occasion CHAPTER 5: Randomizing Yourself CHAPTER 6: Social Programming CHAPTER 7: Art or Science? CHAPTER 8: Where To Go From Here GLOSSARY OF TERMS CONTACT/MISC INFORMATION --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- PREAFACE: Introduction to Social Engineering What is social engineering? Social Engineering is just a nice word for conning. Conning a Telco employee into giving out numbers, conning a mark into giving out his credit card number, or even just conning the girl at the corner shop into going out with you on Friday night. The aim is to achieve your goals by engineering the situation, and it's all about control. Engineering the situation requires planning. You must always remember that it is much easier to direct a controlled situation than it is to direct an uncontrolled one. When the ball's in your court, you have nothing to prove, and everything to gain. You don't have to waste time proving your worthiness to be in that situation. It's your situation. The other person(s) is in YOUR territory. (Excuse my vagueness.) A common thing people mistake when learning about social engineering is that it is all about commiting crimes. That is completely untrue. Social engineering has a plethora of uses, it just so happens that some of its main applications are considered criminal. Well, what about its other uses? Say you have a friend who is about to hear something that will upset her greatly, and that it is NOT something she needs to know. You can use your knowledge of scoial engineering to create a spontaneous lie to protect her from the truth. That would require you to learn how that specific person would react to different things you would say so that you could create a lie that not only would help her by not revealing whatever ugly truth there is, but will not allow any suspicion to arise. Like I said before, social engineering is about conning, but it doesn't have to be for criminal uses. 90% of it is just the research you have to do to be able to engineer a situation. What kinds of things will you have to learn to be a successful social engineer? You have to watch how people behave, react, learn how people think, learn to spot human weaknesses, learn what words to use when speaking to what people, etc. etc. etc. The list goes on and on. If you're ready to jump one step up above everyone else, read on. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 1: Physiognamy Physiognamy is a belief system, commonly used in the middle ages, that says you can interpret peoples' personalities by looking at some of their physical features. The way I am going to talk about it will show it as a way to create temporary stereotypes towards people with certain physical characteristics so that you may have a better chance at engineering a situation with them involved. Keep in mind that I am not encouraging you to stereotype people, but merely to make educated assumptions so that you may be better prepared when dealing with people. I suggest, as I do with everything in here, that you go out and research Physiognamy elsewhere to get a broader perspective of it. What you must do, is learn what specific physical characteristics might mean about a person, and learn how to decipher how true they possibly could be based on a combination of the physical characteristic and any personality traits they show when talking to them or watching them. You'd be surprised just how accurate this can be. Below I will list several common physical traits and what they might mean. As far as going beyond that, you must go out and do some field work on your own to let this list grow. Calloused Hands: This has a very high rate of meaning the person in mind does either a fair amount of housework, or has a job involving manual labor. You must make sure to see where the callouses are. If they are only on certain places on the fingers for instance, this might just mean the person plays guitar. All in all, it allows you to make the stereotype that this person is not lazy, or at least is not lazy when it comes to things that they enjoy doing. Scars: People with multiple small scars are usually very active. Probe them to find out where they got these from without directly asking (for example, they may skateboard or ride bikes). Scars can have many, many possible meanings. Bad Acne: Acne is something most teenagers have at one time or another. If someone has lots of white heads, you can guess that they aren't as insecure about their appearance as msot peple are. Kids that are really insecure usually check themselves all the time and pop the little buggers. Of course the person just could have ti so bad they can't keep up, but you must remember that the point here is to make educated assumptions and that you won't be right all the time. Lot's Of Makeup: This can mean a lot of things, but the most common are that of insecurity or strong personal creativity. Look to see if it appears as if the makeup is being used to cover up things, or to make the face stand out. When guys wear makeup it is the same thing, but when you see a male using makeup to cover up something that hints at very large insecurities. Wandering Eyes: Wandering eyes usually mean at least one of three things: Lying, being intimidated, or paranoia... paranoia being the least usual one of the group. When someone is intimidated or frightened they try to act preoccupied with something else in their environment to avoid having to make any form of contact with the person they are intimidated/frightened by. Another common thing with that is the person will open up a book and act like they are reading, look at their watch, or act like they are trying to find something in their pockets. If you can intimidate someone, you have greatly increased your chances of being able to engineer them. About the lying... when most people lie they are afraid that you might discover them, so for some reason they don't like to make direct eye contact. "Strange" Clothing: When someone dresses out of the norm it is usually for one of two reasons. Either they are trying to look weird to "be cool" or because they like how it looks and detest the rampant conforming going on by most people. If they act mature and speak very intelligently they are usually dressing odd for the second reason and not to just "be cool." That should be more than enough to get you started. Mosty likely you will find new things that some of the above characteristics point to on your own. The most important thing to remember though is to ALWAYS try to find more than one physical trait that points to the same personality trait you are suspecting the specific individual to have. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 2: Nuero Linguistics SECTION 1: Saying What They Want To Hear Now that you have some good ideas about how to use social engineering to control situations, you must learn to speak in a manner that will make the target feel comfortable, or to talk in a way that will get them to say things that they normally wouldn't (for example, credit card #'s and the like). The first thing you must do is learn as much as you can about the person, that way you can plan how you will approach the problem. The main goal at first will be to get on their good side. For instance, if they like sports you should ask what their favorite team is, then reply with something like "Oh my God, that's my favorite team too! They're the greatest!" Ok, so that sounds stupid... that's why I'm leaving most of this up to you. Once you have a foothold on the person, begin to pry at them, always prying by using words and phrases that you feel will be to their liking. Finding out what people want to hear is the most difficult part of social engineering, and takes long hours of studying to even come remotely close. Here's a small example to get you going. It will be in the form of dialogue. The person's (you) goal here is to discover secrets about this girl's relationship with her current boyfriend. You: So what do you really dislike that guys usually do? Her: I don't know, it just pisses me off when they feel like they own you. You: Yeah, I think guys that do that are fucking idiots.... it makes me so sick ya know? Her: Oh yeah, I know EXACTLY what you mean! You: Your boyfriend isn't like that is he? Sorry to ask, but it sounds like you're kinda upset now that type of thing was mentioned. Her: Oh it's no problem... I dunno, he kinda acts like that sometimes... it makes me so angry. You: Why are you still with him then? You don't need to deal with that crap. There you go, you just hooked yourself a big one! Most people won't come outright and start telling you details of such things as relationships simply because they are personal. As you saw above though, if you can get some sort of commonality going between you two, even if you were lying, you just about own the conversation. If I were to go over all aspects of this section, you'd have quite the large amount fo reading to do. So, instead of writing all that out, I encourage you to take notes and develop your knowledge of this yourself. Learning what to say to what people is THE MOST IMPORTANT part of social engineering, bar none. SECTION 2: How To Lie As you should already know, lying is an important part of this game. You have to be good at it. Most people, when they first start social engineering, have never told a major lie in their life. This doesn't matter. In my experience, what it all comes down to is acting skill. When I first started social engineering I was a drama student. I spent 4 years learning the art of becoming someone else. What I learnt was that it was all about research. You can never do enough research on a topic. You never know what you're going to have to know to pull off a scam. Assuming that you are already a confident speaker, (if not, then there's something you have to work on) what you should really be studying is the art of RESEARCH. What you have to research is the tricky part. It all depends on the type of lie. To my knowledge, there are 3 common types of lies, each more difficult that the last:- Type 1: A lie that you tell on the phone to someone in order to get information out of them, or to convince them you're someone you're not. These include telling people you are a Telco worker, shop assistant, whatever. Type 2: A lie that you tell someone in person, in order to get information out of them, or to convince them you're someone you're not. These types of lies are somewhat harder than the phone ones, as body language has to be taken into account. Type 3: An unspoken lie. These are definately the hardest, as they can only be done in person. These lies use nothing but body language and appearance to convince people. A good example of this is avoiding being carded when you go out with friends. If you manage to pull off the effect that you are over 18, then no one (almost) actually asks for ID. Tips for Type 1 lies:- Before you even pick up the phone, think about who you are going to say you are. When you think you have chosen a role best suited for the person you are calling, research them. How do they talk? Fast or slow? Is a false accent going to make you more convincing? Are they a demanding type of person? Are they going to just sit on the phone and agree with whatever the mark says? These are all things you have to think about. There are hundreds more, but most of them are situation-specific, so I can't mention them all. OK, once you know how you are going to speak, you have to figure out what you are going to say. Most of the time this will involve acting like a store worker or something along those lines, so what you have to find out is if they have some kind of protocol they have to follow on the phone. Usually it something like, "Hello this is from . Can I please speak to ?". When you think you have that down pat, the only thing you can do to help you out is to ring a friend and ask them if you sound convincing. Tips for Type 2 lies:- To pull off this kind of lie you should read the tips for Type 1 lies, because it'll take all that and a little bit more. You have to know how your "character" speaks, acts, even looks. Getting hold a uniform is probably the easiest way to look like someone else, but it doesn't stop there. You have to consider what kind of life these people lead. The previous section on physiognamy outlined a few indicators as to how a person's job might affect their appearance. Be sure to take all this into account when you are getting ready for your meeting. After this, all you really have to control is your body language. Use your hands to speak if you have to. Keep them in your pockets if you have to. It really doesn't matter what your specific actions are, just don't do something that'll blow your cover. Tips for Type 3 lies:- These are by far the hardest to do, and (thank god) don't come about too often. Like I mentioned before, they usually only happen when you're trying to do something, (visit a bottle shop, say) when you're underaged. These lies are all about body language. You have to look so convincing in your role, that no-one questions your credibility. My friend once managed to bluff his way into a formal dinner just by wearing a suit and acting like the crowd that he was mingling with. His secret was to give the air of a formalized person who was a member of a distant branch of the company holding the function. They all accepted him, and he only ever had to speak about the company once. The trick is to copy. Look at how everyone else is acting, and just do that, maybe making a few changes to suit your own personalized style. Lying, as I have mentioned before, is difficult. It requires practice, a bit of experience, and luck. My only advice to you is not to give up. If you can't get the information you need, just look at alternative methods. See the chapter "Gathering Information" for more tips on how to get what you want. SECTION 3: Changing The Subject This is a relatively simple thing to do. Say you are in a situation in which you want to change the subject of the conversation. All you must do is use the skills you've learned since reading SECTION 1 of this chapter (I know you've been practicing... right?) to learn what subjects in life the target is favorable to. Now all you have to do is somehow link the subject you wish to change to with one of those things that the person likes. That should enable you to create some transition sentences that will effectively get the subject of the conversation changed. Another way is to force the new subject on. When you want to change the subject, merely get all excited and say things to the effect "Oh my god oh my God!" over and over and act like what you want to talk about is sooooooo cool and important. With a lot of people, especially the denser ones, this will work beautifully. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 3: Gathering Information SECTION 1: Watching People By now you can tell that the littlest details about a person provides you with a myriad of windows into their personality. Perhaps the most important thing to be able to do with social engineering is gathering information by watching someone. Just follow them around and make a note of everything they do. At first what you gather will seem pretty meaningless. You should have some info on where they go, what they like to do, who their friends are, etc. Now sit down with your notes and start disecting the person. Are their friends popular people, do they go to sporting events, do they commit any crimes, do they stab friends in the back, do they plot, do they like to talk about people? All of this information is extremely helpful when you must socially engineer this person. For instance, if you hear them always talking about a friend of theirs behind the friend's back, you probably could talk this person into betraying someone. Be careful though, because they could just as easily betray you. SECTION 2: Shoulder Surfing When watching people you may come into some situations in which they will preoccupy themselves with some task and you can "shoulder surf" them to see what they are doing, writing down, etc. You may get all sorts of information by doing this... such as credit card numbers, social security numbers, adresses and phone numbers, ATM pins, personal information, and so on and so on. Now some idiots might run right out and try surfing people for some credit card information so they can buy themselves some new clothes and a CD player, but that is unavoidable. People who are pathetic like that will eventually get caught and pay their dues. Since shoulder surfing is painfully obvious, try and do it when nobody is looking directly at you, and NEVER get too close. If someone detects you doing this they'll probably turn around and feed you a well placed knuckle sandwich. If people near you see what you're doing they'll probably tell the nearest police officer and then you'll have an awful lot of explaining to do. The best way to go about doing this is to be patient, wear VERY dark sunglasses so you can look around without being noticed, and not to get greedy. SECTION 3: Dumpster Diving Mmmm... garbage, you know I love it. The most common reason people go dumpster diving is to find boxes when moving, to look for things to recycle, etc. Keep those in mind, those are your new excuses when caught digging through a trash can at 3am. If you're careful and lucky enough you won't have have to use them. When dumpster diving there is two major rules. One is ALWAYS bring a friend (to drive the getaway car and to watch for certain undesirables), and ALWAYS go at night. The reasons for these rules are obvious enough. For the purposes of social engineering you'll be looking for several items in a few places. When going after a specific person you'll want to get into their home trash. This can be pretty difficult to do with neighborhood watch programs and all, so I would just run up, grab their trash can, and take off with it down the street. It might be a little less conspicuous if you take a few bags of garbage and leave the can though. When looking for a target, for whatever sick and twisted reason you may have, the best place to go is to telemarketing businesses. They heave tons of phone numbers and stuff into their cans. Sometimes you'll find companies that shred their paper, but as far as I know most don't bother to. The big problem with getting into big company trash cans is that of Mr. Security Officer. Before you target a place, drive around there for a few nights to see if they employ night security. Extra Dumpster Diving Tips: -If a trash truck comes, GET OUT FAST. -If someone catches you, play innocent and feed them a pre-planned excuse. Common excuses are that of "I got lost," "I was looking for recyclables," "My friend thought it'd be funny to throw my shoe out the window so I made him pull over so I could get it," and "I am moving so I was looking for boxes." Always swear you didn't know what you were doing was illegal and go on and on about how it'll never happen again. BE POLITE! -Wear dark clothes, but not clothes that make you look like a hoodlum. -Wear gloves! No one wants poo on their hands! --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 4: In Your Face Engineering SECTION 1: Becoming Someone Else I'm sure you can come up with countless reasons to act like someone else... some being to call in and get their phone service shut off, to trick friends of theirs, to get info you normally couldn't, etc. Before even attempting anything like this, collect as many items from the following list as you possibly can. -Full Name (First, middle, last) -Residential Information (Phone #, Adress, Fax #) -Work Phone Number -Social Security Number -Physical Description (what your target looks like) -Misc. Information (How many kids they have, other personal information) Now that you have collected at least some of that information, it would be a good idea to talk to that person somehow so you can gather information on their speaking patterns. A good way to do that is to call their home and act like you're from one of their insurance companies (find out which to act like by looking through their trash and finding insurance papers), or to pretend to take a survey. Surveyors are anger magnets though so you might want to choose another identity. By now you should have enough information about them to cover your ass at least most of the time when questioned on who you really are. When someone does this, act really surprised that such a question would be asked. Be forceful when you speak (unless you are talking to someone the person knows, then act as the person normally would). Here's a tip for this section: Don't try to impersonate someone unless you are on the phone, or you are just a really damn good engineer. Impersonating someone "in person" is highly dangerous to your cover. Since you are not the target, you most likely do not know who knows what he/she looks like and who doesn't. SECTION 2: Dressing For The Occasion Oh boy is this section fun! This is where you get to play dress up to gain easy infiltration of "places you shouldn't be," or to make people get the wrong imperssion of you. First I'll talk about the impressions part. When someone sees you, whether anyone likes it or not, they form some sort of a judgement based on how you look. If you're one of those new Psuedo-Gothic people, the reaction you'll probably get is either "Wow, cool clothes man!" or the not-so-friendly "What the f*ck is wrong with you?" Now if you were to dress up in a suit instead, people's ideas of you will be altered drastically. Keep this in mind when walking into a large corporation in search of "something." Ok, here's the hard part. You must decide what to wear when going where. Now right off the bat you might think the only thing appropriate for a large coporate type place is a suit, but that is VERY wrong. In fact, a suit isn't really that appropriate unless you look the right age to be working there, and even then people would think it's kinda funny that there is some "new guy" walking around and might ask a lot of questions. The best thing I've found is to act like you are part of some maintenance crew. This means you need yourself, say, a Telco hat and some "telco-guy" looking clothes. Just waltz on in acting like you are doing a routine check on the lines. It might help to make some fake, yet realistic, ID. Speaking of identification: DON'T CARRY ANY. That is a very stupid thing to do considering you are trying to act like someone else. If you do carry an ID, put it in your sock or something. Now you've got all the info you need on what to wear, but there is just one last problem: your speech. I don't think anyone on the face of this planet will not be suspicious of someone in a professional environment using the words "dude" and "bro." Learn to speak your part. This will be harder for some of you than others. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 5: Randomizing Yourself The art of social engineering is a valuable skill, valuable beyond belief. And the basis of it all lies in our social programming. Social programming guides the way we act, think, and feel. To successfully become an engineer, you have to learn to identify the key features of a person's programming, thus enabling you to predict their reactions to almost any situation. Now the question that you should be asking yourself now is, "How do I stop someone from 'socially engineering' me?" Calling yourself a social engineer just to have some kid you don't like make you eat humble pie is one of the worst feelings a person can get, so that's why I've added this section. No one can escape social programming. It exists within us. We have no control over it's existance, but we do have control over the extent to which we are influenced by it. If you are heavily affected by your programming, then you are more likely to be susceptible to engineering. If you are able to "ignore" your programming, then you can randomize yourself. The basic theory behind randomizing yourself goes something like this: 1.) When a person's social programming evolves to a point where it completely governs their lives (as most people are), then it is easy to engineer them, because when you learn how they think, you can stay one step ahead of them. 2.) If I act without regard to my social programming, then I will be effectively "unpredictable". 3.) When I am "unpredictable", it suddenly gets a whole lot more difficult to stay a step ahead of me, therefore I am as close as I can get to immunity from engineering. To put this theory into practice, let's assume that you are a regular, hard-working, teenage student. Your busy schedule only lets you have a few hours a week to socialize, so the first week you might use your time to call up friends and just talk to them. Talk to them about whatever it is that you like to talk to friends about. The second week, spend the entire week without contact to the outside world. Then, after you get the feeling that everyone is wondering just what the hell is up with you, spend a few days constantly out and about, keeping yourself busy any way you can. People, especially those close to you, should find that you are a different person every day of the week. You are now one step closer to randomization. So far, I have only talked about randomization with respect to lifestyle, as this is the most obvious one to people around you, and they tend to notice the difference much faster. But to make it a bit more obvious, you have to change the little things about you too. Every change you make to yourself can only help in your randomization. If you usually dress casual, go out one day in a suit. If you are usually a big talker, take a back seat and let someone else direct conversation. If you have a tendency to use slang terms, then every now and then talk in a more formal tone. This will also help you practice for when you have to sound at least ten years older on the phone. There are endless changes you can make to your life. Most of them will be noticed. But always try to remember that becoming a randomized person might help you to avoid being socially engineered, but it could also have drastic effects on the quality of your life and the people in it. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 6: Social Programming What is social programming? Well, it's the little voice inside your head. The voice that tells us right from wrong, good from bad. It is the product of generations of thought and teaching. It is our individuality. It is a form of programming in which our society and it's components (be they family, friends, enemies or strangers) condition our minds into certain beliefs. It is even possible to program yourself. Social progamming is responsible for most of the world's predjudice, especially among youth. Youth, (most youth, anyway) I have found, have a tendency to be easily misled. They might have a fight with one person of Asian descent, and suddenly all the "damn chinks" are the enemy. They grow up believing certain people are inferior and superior to themselves. Parents, from an early age, teach their children things that are not always correct, but by the time the kids realize this they are so convinced that it takes a long time for them to come around and see the light. A good example of this is the Vietnam War. Thousands cheered an International army as they had been conditioned to believe that the Vietnamese were inferior and would suffer a quick defeat (many still believe this). When the television footage came back they were shocked to discover that they were all wrong, but some people were never convinced. There is still evidence of these people left today. Social programming, in a way, can be seen as an enemy; a powerful, non-physical force that is creating havoc everywhere. But it is also SAVING lives every day. Our social programming, in it's primary form, is what stops us from repeating dangerous things, because we will do something once (say, overdose), learn that it's dangerous, and instinctively avoid it. So in that way, it is good. You can see that social programming is good or bad, and to tell the truth, it doesn't matter because you can't avoid it. Even you and I are socially programmed, but what you can do is be aware of it. By finding someone elses key socially programmed thoughts and beliefs, you have opened up yet another door into their life that, when used in conjunction with the methods outlined in other areas, can provide you with all the information you'll ever need. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 7: Art or Science? Whe one considers Social Engineering, it is usually reffered to as, by myself and other well-established engineers, an art. Yet in it's true form, it is a science. To lexically define the difference between an art and a science, would be nearly impossible. Socially defined, the difference is usually expressed as "A science relies on fact and definite (usually boolean) responses, whereas an art is focused around answers open to interpretation. When first learning to engineer, it is easiest to refer to it as a science. This gives it a solid base that can be filled with facts that could, if used in the correct sequence, acheive the desired outcome. But if one looks carefully at the sequence and patterns used by this data, some holes become evident. This is where the word "art" comes in. Art is a way to fill in these holes. It involves making educated guesses and predictions to provide the missing answers. But suppose that there were no holes. Suppose that mankind evolved science to a state so refined that these gaps do not exist. Would there be a need for art? Would arts slowly be eliminated from the earth as a new range of super-sciences ravages the planet? Or am I just jumping to conclusions? Is this never going to happen during our time on this planet, or could the reverse of this even be true. Could art really replace science? There are so many possible outcomes the mind boggles to think of them. After writing this much in a school maths tute, I paused. For a long time. My mind started flashing through all the possible outcomes. I cannot choose the one that will happen. There is a "hole" in my thoughts. Does this mean that the contemplation of the relationship between art and science is an art? The answer to this question is unknown. It is highly unlikely that it will ever affect me in my own life at all. And it is also irrelevant to this writing. What is relevant though, is the fact that you now know the easiest way to learn Social Engineering is to start of studying it like a science. Take notes, run tests, assume all findings to be true in given circumstances. Then, when you have a grasp on that, you'll find that you are asking yourself questions that cannot be answered. This is when you are ready to progress to learning it as an artform, learn to fill in those holes. When you get this far contact either of us writers and we'll work together from there. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CHAPTER 8: Where To Go From Here Now that you have read through this handbook, you have a pretty good chance at becoming a good social engineer. As you've noticed, most of this fine art is researching things, so the best advice to give now is to continue that practice as long as you are interested in taking advantage of the social programming we have been stuffed full of since the beginning of man. I urge you to come up with your own theories and methods to go about social engineering with. If no one ever invents anything new, nothing will ever change for the better. Here are some last minute tips that were decided to be added: -You can retrieve phone numbers, etc. at www.gopher.com -Remember to gather as much information as possible before taking on a big engineering project. -Once you've been around with this information in mind for a long time, you will start having the ability to lie and socially engineer situations on the fly; that is one of the main goals of most engineers. -Always use your knowledge for good, because the old saying, "What goes around, comes around," comes true more than you would imagine. -Learn to do things like faking sick, hiding emotion, showing fake emotion, etc. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- GLOSSARY OF TERMS: Dumpster Diving: (v) Searching through people's rubbish bins for clues about them, for example, Phone Bills, Customer Lists, and Receipts. Neuro Lingustics: (n) Using language that appeals to a specific person to open them up to you, and allow one to gain information that would normally be considered too private. Physiognamy: (n) The art of using a person's physical appearance to make educated inferences about their lifestyle. Randomizing: (v) To put something out of order, or to be in no distinct pattern. Shoulder Surfing: (v) Following a person closely so as to gain information about them by looking at what they're doing. Social Engineering: (n) The name given to any acts of engineering that involve the interaction of people in any given environment. Telco: (n) A name given to represent the global community of telephone companies. Social Engineer: (n) Any person who uses learnt knowledge to engineer social situations, or to manipulate any general or specific part of the world's social masses. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | --------------------------------------------------------------------------- CONTACT/MISC INFORMATION: To contact the writers of this handbook, please use the following information: Email: Sirkuit - Sirkuit_w@yahoo.com Phrantic Anima - Phrantic_anima@hotmail.com Website: http://n0p.crashcentral.com (Distribution Site) We wish to thank the following people and organizations: n0where Productions, C2032, HAO, Telcos everywhere for the use of their equiptment (bwahahah), Plato, Troy R, Robin T, Shannon K, Alex B, Austrailian and American phreaks, and anyone who has ever tried to push the limits of the human mind. Sirkuit wishes to dedicate his part in the production of this file to his girlfriend Amanda. Please don't bug us about spelling or grammar errors. You'd be surprised how many people think it is that important. --------------------------------------------------------------------------- | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ---------------------------------------------------------------------------