User:AKMask/Howto

Just to put this up, It's a page for me to scratch out a longish how to guide that will eventually be posted onto wikibooks when I finish. Right-o, so that this doesn't get clobbered by a AfD or Speedy. Off to write.

The concept of Social Engineering has been used effectively for centuries before it ever got a name. Con Men used it, spies used it and criminals used it. This volume is an introduction to the basic theories and practices of Social Engineering, including true examples of their effective use. I have attempted to make this book as accessible as possible, but some level of intelligence is to be assumed. Also understand that using any knowledge gained from reading this, in certain circumstances, can produce illegal results. The author takes no responsibilities. In order to better utilize this volume, understand that it is divided into two parts. The first dealing with theories and practices, the second showing you how they were efffectivly used by myself or someone I know.

---

Basic Concepts

Social Engineering is expressly the practice of hacking people. Hacking being a term for making foo do bar when it was designed to do baz. Making people react differently then how they should. This means playing on assumptions held by a person. You must appeal to what they expect to see. The usual blends in, differences stand out. Perhaps the best example of what you're going to learn to do in this book is used by the older teenager sneaking into a bar. If he slinks in, nervous, sitting in the back away from everyone and asking a waitress what the bar offers, he's going to get carded. But by walking in with confidence (key word, see later) and purpose (another one, see later) and going up to the bar like he owns the place, looking the bartender in the eye and asking for a bottle of beer he knows they have, he is less likely to get carded. Let it be pointed out that in this example he is more likely to be seen, but less likely to be noticed. He is presenting the bartender with what he expects to see from an of-age patron, whereas the nervous kid in the back triggers flags in the mind of the staff because he looks out of place. Much of what one would employ as a Social Engineer are techniques used by actors to make their performances seem more believable. While most of it must be tailored to individual circumstance, the general layout is applicable to all situations.

Motivation

Beyond just a cliche, motivation is getting a reason in your head for why you are doing something. This is a handy bit to remember, because it imparts a purpose into all your motions. Walking down the hall thinking 'I'm going to my car. Got to get to my car' results in a completely different look then thinking 'I'm walking down a hallway, whee'. Proper motivation makes it look like you know what you are doing, and aren't just poking around. Someone who appears to just be wandering around is much more likely to be noticed, remembered and questioned. Everything you do should have motivation behind it, and it need not even be accurate. All you are trying to accomplish is the look of purpose that comes with having a goal or dedication in mind. You'll be surprised at how easy this is. But there are things you could do even with motivation that denote the lack of planning that an information acquiring intrusion requires. Don't ever look lost. Do not study a directory