Social Engineering

Have you practiced social engineering? It seems like a useful and fun skill to have, but I don't know how to safely try it. In a hacking context I mean, I'm not interested in manipulating people in my social circle. For other skills like exploit development, it is much easier to practice in an ethical, legal and safe manner. I think it would be easiest to start with emails, but most people nowadays are very skeptical of suspicious mails. Any ideas?

No pls rangeban indians

>In a hacking context I mean, I'm not interested in manipulating people in my social circle. youre not gonna make it bro

>I think it would be easiest to start with emails, but most people nowadays are very skeptical of suspicious mails. Any ideas? That isn't a problem. Sending mails is cheap and one sucker is all it takes.

>social engineering lying and/or deceiving? are you asking people if they have ever lied? what answer do you expect? and why do you talk like this. "social engineering" - you're mentally retarded

>>28390 When I said "practice" I meant it as in "doing it just for the sake of getting better at it". I'm ESL but this seems to be the dictionary definition of that word. But if you want me to rephrase the question so that you too can understand it: Have you tried doing exercises to get better at social engineering, or if you don't like that term, tricking people into behaving how you want them to, in particular in an IT security context? >>28389 Mass spamming seems boring to me, I would be more interested in tailoring mails to the recipients. So I guess I could pick some company, research important employees, try to find some context in which they would open my mail and try to make them click a link. The link would be harmless because I don't want to cause trouble, but I would use some IP grabber site just so I see if I was successful.

>>28391 >I'm ESL You can just say Indian, we know.

> I think it would be easiest to start with emails, but most people nowadays are very skeptical of suspicious mails. Any ideas? lol -- no First, absolutly not. Second modern SocEng isn't the same as in Mitnicks day. You absolutely need more technical understanding. Why do skids always want to start with Social Engineering? is it laziness? fuarrrking indians.

>>28412 >Second modern SocEng isn't the same as in Mitnicks day. You absolutely need more technical understanding. How so? What exactly do you mean by that? >Why do skids always want to start with Social Engineering? What makes you think I start with it? I originally got into security from an interest in reverse engineering and played CTF for a few years until LLMs made that boring. I don't work in the field, but I enjoy trying to make things behave in ways that they shouldn't. Social engineering seems like a fun example of that, even though it is obviously very different from your typical CTF challenge. >fuarrrking indians. But I'm European. I'm not at all interested in the >Saar this is Microsoft saar. [...] NO DO NOT REDEEM!!! type of scam if that is what you're talking about. As I already said in >>28391 I'm not interested in spamming low effort stuff until you find some braindead old person believing it. I want to learn how to target specific people by using knowledge about them, building a suitable context and make them do something they normally wouldn't. Again, nothing nefarious, I only seek a new challenge.

>>28433 But what do you want with Social Engineering? If your biggest aspirations after RE and whatever else you claim is either scamming or Cyber Security Awareness companies, what the fuarrrk are you here for?

>>28449 I'm not looking to do it professionally. I want to learn a new skill just for fun. Are you really only interested in topics you expect to earn money from? That's sad.

>>28382 Pro Tip: If you actually just learn to be a kind and genuine human bean, you will learn social engineering without having to take a course on it...

>>28382 >Have you practiced armed robbery? It seems like a useful and fun skill to have, but I don't know how to safely try it. In a hacking context I mean, I'm not interested in stealing money from a gas station. >>28391 >Robbing random convenience stores seems boring to me, I would be more interested in planning a jewelry heist. So I guess I could pick some jewelry store, research its security, try to find some context in which I would be able to get away before the police arrives. The heist would be harmless because I don't want to cause trouble, but I would keep some cheap link just so I see if I was successful. >>28452 >I'm not looking to do it professionally. I want to learn a new skill just for fun.Are you really only interested in topics you expect to earn money from? That's sad. This is how retarded you sound. If you're a normal self-respecting person there's no reason to "practice" social engineering. Countless paths in security and you decide to focus on the most technically uninteresting one. And for the record, there is virtually no point practicing social engineering because virtually no skills are required.

>>28455 Lainon is right, social engineering is just manipulating people. The actual socially engineered part of it is so dull and boring. I don’t even know what you would want to know. It also depends so heavily on who you are. for example I knew a female hacker that would pretend to be pregnant so that she could get people to hold the door open for her. there’s some stuff that’s medium interesting schemes there AiTM or other phishing stuff but to get someone to do what you need is the dullest part of it all.

>>28456 Most users here are of this tier. This website is a place to sinkhole candidates who believe themselves capable.