Article from Social-Engineer.Org Newsletter Vol. 02 Iss. 17
Recently, I was discussing how social engineering skills are used in everyday life. Yet, one of the most widely asked questions is: “how one can practice these skills?” We have written about this very topic a number of times, most recently, Jim wrote about it in newsletter #15.
This month, the focus is on how you can develop “lightning social engineering” skills. That is the ability to turn these skills on with lightning speed and obtain your desired results without fear or apprehension.
After the above discussion, I started to notice where I use techniques in everyday life that could be classified as social engineering, or at least, skills that could enhance my SE practice. Awhile later, I was down in DC for a conference and I thought to myself: how can one practice and see if the skills they have will work in quick formats.
Many times in social engineering engagements, there are circumstances that cause us to need some skills to get out of sticky situations with no time to prep for a response. How we respond to these scenarios can determine the level of success or failure we achieve.
Let’s analyze this topic in more depth so we can see clearly how these skills might mean success or failure in many situations. Lightning SE in the Wild
Imagine you are trying to gain access to an area that is restricted to you. You have a plan clearly laid out that works and has worked for you in the past, but as you approach your target destination, rounding the corner is a security guard.....
Or maybe this scenario: All your intel has told you that Mrs. Smith is at the receptionist desk Monday-Wednesday. Your information gathering has given you some juicy details to quickly build rapport and you know this will work. But, as you walk up to the front desk, she is not the one there. In fact, she has been called away for a family emergency and the person replacing her is completely unknown to you.
The list can go on and on, but the point is, most of these scenarios are examples of unsuspected situations. Many times, failure can occur in these situations for no other reason then lack of confidence. Fear of failure and fear of being caught both stem from this lack of confidence, but there is a way to "practice" for these unknowns. This is something I like to call "Lightning SE". Prepare and Practice for the Unknown Factor
If something is unknown, how can you prepare for it? If there are unknown factors that may pop up, how can you practice? These are very good questions and while the answer is that you cannot prepare or practice for every unknown, you can use everyday legal situations to try and see how far you can get.
The reason for using legit situations is that if you had to back out, there is no fear of getting caught, mainly because there are no repercussions. When the fear of being caught is reduced or removed, then we can allow ourselves the freedom both physically and mentally to test the waters.
To pove that when fear is reduced (or removed) humans can achieve great things, I refer to a study created by psychologists E.J. Gibson and R.D. Walk. They developed the visual cliff test to use with human infants and animals. Gibson and Walk created their visual cliff apparatus by having a table with glass on it. The glass had material pasted right under the glass on half of it and on the other half, the material was placed inches or feet under the glass. This gave the impression of a cliff.
Babies were placed on the surface and coaxed to try and make them crawl across the glass. Joseph Campos, a professor of Psychology at Berkley University did a study that really shows how well this works. In a video, he placed children on this "visual cliff apparatus" then he tried to coax them across the "cliff" with prizes, toys, and treats. It didn't work. The toy was not worth the "risk" to the baby.
So he stepped up the method by having an adult on the other side of the cliff. This is where things got interesting. If the adult showed a facial expression of fear the baby would not go anywhere near the cliff, but if the adult showed nonverbal communication that indicated happiness the baby felt comfortable and took the risk.
To me, this is groundbreaking research that can help us better understand the importance of non-verbals. A video of this research can be found here: Non-Verbal Video
Now, what does this have to do with Lightning SE? To me, everything. The same thing that made the baby cross the visual cliff can work for us... Remove the fear of being caught… Remove the fear of doing something illegal… and you can practice your SE skills and perfect them. Doing so in a natural environment can also help you to recognize and then duplicate your non-verbals that you portray when you are comfortable, relaxed, and not in fear mode. The only way you will know is to try and take notice. But, if the first time is during the actual engagement ,you will not know what is normal. Setting up that baseline is essential so you know what it feels like and looks like when you are under pressure.
The best way to do this is to pick out a few things you might ask for that would be normally rejected and see if you can get the person you are asking to give in. For example, here are a few you can try:
• Try to get your hotel room key rekeyed without giving ID.
• Try to get the cleaning personnel or security person to let you into your room with no ID.
• Gain access to a restricted area simply by asking.
• Call your cell phone provider and try to get information on yourself without providing proper ID.
• Try to obtain personal information from a stranger.
This is by no means a comprehensive list, but it can help you to spark a few thoughts or avenues you can try. This should not be long and drawn out, but something you can do quickly. Maybe 30, 60 or 90 seconds worth of SE.
The questions you want to ask yourself are:
• What facial expression do you want them to see?
• What other non-verbal queues do you want to portray?
• What information are you trying to obtain; what is the goal?
Give this some quick thought then pick out a scenario and giveit a try. I wanted to try this in the real world and capture it on video so I had something to show you. I chose to try the scenario of getting a security guard to unlock my hotel room with no proof of ID. My quick pretext was that I was running late on my check out and in my already full hands was a key that didn't work. With non-verbal expressions that would show open and warmth, I would simply ask the security guard for his help and allow him to fill in the blanks as to my problem. Doing this, I would hope that he would make an assumption and allow me access.
Of course, the fear was removed because it was my room and if I was "caught", I could prove it, but still, it - all happened under 30 seconds. The set up was easy,now all I had to do was remove any nervousness and openly talk to the security guard asking for his help. I thought I would throw a pause in there that would allow him to fill in my blank and within 35 seconds, I was given access to my room with no proof of ID.
Want to see it in action? Well, the video is shaky, but I captured the events. I made a small video with explanation for your viewing pleasure: Social Egnineering.Org Lightning SE Video
Hopefully, this will be one of a few in a series that will demonstrate Lightning SE skills. Learning to adapt, change, and move quickly when it comes to social engineering skills can make you more comfortable. It can also you master the skills to make you a great social engineer. How do you practice lightning SE skills?
Send us how, where, and when you perform Lightning SE to email@example.com
. Written by Christopher Hadnagy