Weitere ähnliche Inhalte Kürzlich hochgeladen (20) Google Nexus 7 Phone1. A guide to social engineering
by
Dorkslayz/HackerMcAdams
Page 1 of 10
© Dorkslayz 2012
2. Disclaimer
I am not responsible for any acts performed with
knowledge gained from this eBook, this eBook is
simply educating you on the practice of Social
Engineering.
If you purchased this eBook from anywhere else than
from me (Dorkslayz/HackerMcAdams) on either
HackForums or SethHack Forums.
Please contact me.
Do not redistribute.
Page 2 of 10
© Dorkslayz 2012
3. Table of Contents
Getting Started.......................................................................................4
Introduction to Social Engineering.......................................4
The basics of Social Engineering............................................4
Possible targets to Socially Engineer..............................................5
Scenarios you may encounter...........................................................6
Company Specific Methods...............................................................7
Intel...................................................................................................7
Razer.................................................................................................7
Microsoft..........................................................................................8
How to get Product ID's/Serials......................................................10
Tools/Resources...................................................................................10
Page 3 of 10
© Dorkslayz 2012
4. Getting started
Introduction to Social Engineering
By definition, social engineering is "the art of manipulating
people into performing actions or divulging confidential
information." In this scenario, we will be using it to get free
stuff from companies by telling them that we have one of
their products and it has malfunctioned, causing them to
send us a replacement.
The basics of social engineering
Social engineering isn't a straightforward process that can
be applied to any and every company. It differs from
company to company, company specific procedures will be
covered later in the eBook.
The basic technique behind Social Engineering is to make
the representative believe you are telling the truth, or to
make the representative feel sorry for you. It's up to you
which path you decide to take, I prefer the "Telling the truth
one" but it's a matter of opinion and you must remember to
be persistent, if they deny your request for a replacement
then go onto their twitter/facebook account and tweet/post
on their wall something along the lines of "x is rubbish, they
straight out refused to replace my broken y. :(" replace "x"
with the company name and "y" with the product and that
should be enough to get them to accept your replacement
request.
Page 4 of 10
© Dorkslayz 2012
5. Possible targets to Socially Engineer
I've ranked various companies based on difficulty, the
difficulty rating may increase over time as companies
become more resilient to socially engineering.
Easy
• Logitech
• Pringles
• McDonalds/Burger King/Any fast food restaurant
• Intel
• Microsoft
• Coca Cola, Pepsi, etc
Medium
• AMD
• Otterbox
• Phillips
Hard
• Razer
• SteelSeries
• Amazon
• Western Digital
• Apple
• Sony
• Rolex
• Iomega
Page 5 of 10
© Dorkslayz 2012
6. Scenarios you may encounter
• The support agent requests that you send the item back.
• A) You can say you lost the item but noted down
the serial, etc before it was lost.
• B) You can say that you threw the item away because it
did not work and you didn't think you would have to
return it.
• C) You got angry because the item didn't work and
threw it at a wall, causing it to break even more.
• The support agent requests you take a picture of the item
(with or without a code on a piece of paper)
• A) You can google pictures of that item and if
necessary photoshop a piece of paper in.
• B) Claim you do not have a camera
Page 6 of 10
© Dorkslayz 2012
7. Company specific methods
Intel
Step 1 - Start a live chat session with Intel or Call them up
Step 2 - Tell them your Processor or SSD has stopped
working
Step 3 - They will most likely ask you a few questions and
ask for your email/offer to send you an email
Step 4 - They may or may not ask you to answer some more
questions, answer these.
Step 5 - For the serial number, Look in AstroPID or On a
youtube video
Step 6 - For proof of purchase, use the amazon receipt
generator or similar.
Step 7 - You should receive email confirmation or
instructions, if they ask you to send it back then please refer
to "Scenarios you may encounter".
Razer
Step 1 - Razer do not have a phone line or live chat system,
so you must email them saying your mouse (or whatever) is
not working and provide a genuine problem like the
buttons are not working.
Step 2 - You should get a reply in which they may suggest
ways to fix the issue, you must say that none worked.
Step 3 - If they ask you any other questions, answer them.
Step 4 - They should email you a form to fill out, fill it out.
Page 7 of 10
© Dorkslayz 2012
8. Step 5 - For the proof of purchase, you can either use the
amazon receipt generator or claim you do not have one
(You can use an excuse such as it was a gift and the person
who gave it to you has passed away or has gone go another
country)
Step 6 - For the serial, use AstroPID or Find one from a
youtube video.
Step 7 - They will either accept your RMA or Deny it, if they
deny it then refer to the bottom of "The basics of social
engineering".
Step 8 - You should receive an email confirming your
replacement.
Microsoft
Step 1 - It's best to call them, however you can Email if you
want to do that.
Step 2 - When you get through to a live person, they should
ask for your name and phone number. You can make up
your phone number if you're using Skype.
Step 3 -They should ask you some questions about the
product, you can say you received it as a gift or you bought
it, it's up to you.
Step 4 - They will help you fix the product, but say that none
of it works.
Step 5 - You should receive a case number, write it down for
future reference. and you should get transferred to another
person.
Page 8 of 10
© Dorkslayz 2012
9. Step 7 - When you get connected, tell them your name and
Case Number and they make ask you some questions.
Step 8 - They should ask you for an email and say they are
willing to replace it, if they don't then continue to Step 9.
Step 9 - They may ask you to ship it back in, if they do then
go with it and after a week or two, call up, present your
name and Case number and say you shipped your product
in and have they received it yet.
Step 10 - They will say no and have to replace it.
Step 11 - You then should get confirmation that they will
replace it.
Page 9 of 10
© Dorkslayz 2012
10. How to get Product ID's/Serials
Product ID's (Abbreviated as PID's) are not that difficult to
get a hold of. There are a wide range of PID's available on
AstroPID for you to generate however if the PID you are
looking for is not there, you can try any of these methods.
• Find your item on Ebay, contact the seller and ask for
the PID for "Verification Purposes".
• Watch a youtube video on the item, you may be able to
find a PID on the Item there.
• Ask your friends if they have the item and if so, ask
them if you can have the PID.
• If you have the item, try and find the PID on it.
Tools/Resources
Amazon Receipt Generator - http://j.gs/18Fy
AstroPID - http://j.gs/18G2
BestBuy receipt template - http://j.gs/18G8
Thanks for buying, if you would like to resale this
eBook, contact me.
If you think I have forgotten something, contact
me.
Page 10 of 10
© Dorkslayz 2012