The Social Engineer’s Playbook

Description

The Social Engineer's Playbook is a practical guide to pretexting and a collection of social engineering pretexts for Hackers, Social Engineers and Security Analysts. Build effective social engineering plans using the techniques, tools and expert guidance in this book. Learn valuable elicitation techniques, such as: Bracketing, Artificial Ignorance, Flattery, Sounding Board and others.This book covers an introduction to tools, such as: Maltego, Social Engineer Toolkit, Dradis, Metasploit and Kali Linux among others. Crucial to any social engineering test is the information used to build it. Discover the most valuable sources of intel and how to put them to use. Contents......Page 8 ACKNOWLEDGEMENTS......Page 11 PREFACE......Page 12 TARGET AUDIENCE......Page 13 WHAT THIS BOOK COVERS......Page 14 ABOUT THE AUTHOR......Page 15 LIMITATION OF LIABILITY / DISCLAIMER OF WARRANTY......Page 16 OVERVIEW......Page 17 HISTORY......Page 19 TYPES OF SOCIAL ENGINEERING......Page 20 Email (Phishing/Spear phishing)......Page 21 Telephone (Vishing)......Page 22 Pretexting......Page 23 INFLUENCING TECHNIQUES......Page 25 RECIPROCITY......Page 26 AUTHORITY......Page 27 SCARCITY......Page 28 LlKABILITY......Page 29 CONCESSION......Page 31 OBLIGATION......Page 32 ELICITATION......Page 34 FLATTERY......Page 35 FALSE STATEMENTS......Page 36 ARTIFICIAL IGNORANCE......Page 37 THE SOUNDING BOARD......Page 38 BRACKETING......Page 39 CONFIDENTIAL BAITING......Page 40 PRETEXTING......Page 43 RESEARCH & PLANNING......Page 46 LEGAL CONSIDERATIONS......Page 50 Positioning......Page 51 Emulating......Page 53 Anchoring......Page 54 INFORMATION GATHERING......Page 57 Overview......Page 58 Dradis Framework......Page 59 KeepNote......Page 60 Online......Page 62 Surveillance......Page 73 COMPUTER BASED TOOLS......Page 84 Kali Linux......Page 85 Social Engineering Toolkit (SET)......Page 87 Metasploit Framework......Page 92 Maltego......Page 94 PHYSICAL TOOLS......Page 96 Cameras......Page 97 GPS......Page 105 Clothing......Page 107 Lock Picking......Page 108 Miscellaneous Tools......Page 109 THE PLAYBOOK......Page 113 LEGAL & WARRANTY DlSCLAIMER......Page 114 Security Bulletin!......Page 115 Bank Security Email Alert......Page 118 IRS Audit Notice......Page 121 Get Your Updates Here......Page 123 Company Re-Org......Page 126 The Forgetful User......Page 129 Sleight of Hand......Page 132 Financial Foray......Page 136 Attack of the Phones......Page 140 Car Tow......Page 143 Oldie but A Goody......Page 146 Blazing Fast Interwebs......Page 148 Save Big Money!......Page 150 Recalling All Cars!......Page 152 Bank Security Software......Page 155 RESOURCES......Page 159