28c3: The engineering part of social engineering

Download high quality version: http://bit.ly/u4hiBi
Description: http://events.ccc.de/congress/2011/Fahrplan/events/4856.en.html

Aluc: The engineering part of social engineering
Why just lying your way in won't get you anywhere

All the talks i saw about SE so far just showed which good SE's the speakers are. I try to do another approach, what if i get in and don't know what to do then. The talk is about the reconn. before the assessment, the different approaches of SE. Which techniques can one use, how to do a proper intel. and what is useful. How things work and more important why. Which skill set should one have before entering a engagement. And last but not least how do one counter a SE attack.

Preface:

Needed Skillset:

-physical (ie.NLP)

-logical Customer Preparation:

-theoretical models of attack

-check customer needs by his business

-Contract

Preparation & Reconnaissance:

-threat modeling

-physical

-logical

Project Planing:

-Storyboard

-the target

-infiltration

-fetching data/reaching the target

-exfiltrate

-backup plans

Infiltration:

Find & fetch the data:

Exfiltrate the data:

Writing report:

Business impact analyses:

customer meeting:

Category:

Science & Technology

Tags:

• 28c3
• ccc
• Aluc
• engineering
• part
• of
• social

[WhatsReallyGoingOnUS]

How to be a professional liar and steal from others.

This guy should be giving speeches to politicians. I hope people see the inherent immorality of what this guy is promoting. Totally corrupt.

[the79jinx]

@SevenPoint83hertz didn't notice the fcuks, did notice his "stance" guard like, arms behind the back.. like he needs that to feel "secure" on the stage . .

[the79jinx]

Funny thing is his side comments to members of audience (mostly mid-sentence).

That kind of behavior is i.m.o. quite common in active SE-ers, like a "tell"..

It triggers me to look for more things that are "off" on their behavior ;-)

[SevenPoint83hertz]

sweet irony teaching the audience how to properly talk to people while saying fcuk every 10 seconds.

[rmoriz2]

NLP is like PUA: Its theory is totally wrong but the people who use the technology are more self-confident and detail oriented.