Another interesting and factual paper from GOBBLES Labs. In this paper we teach you how to social/reverse engineer and dumpster dive to get information you want and ultimatley get the hunnies. We will explain the process from the bottom so you can do it easy without messing up and making yourself look uncool to your friends in IRC. Part I Dumpster Diving To be a proper social engineer and cool guy you need to know as much about the company or person you are calling as you can without them telling you stuff. This is done easy by doing what is called dumpster diving. This does not mean to dive into the dumpster only to what is neccesary to lean over or climb in if it a real big dumpster. Once youre in the dumpster, you will do what is called trashing, sorting through quickly to pick out garbage bags and other interesting items you may find inside. One time, I found some stuff that was barely expired, and let me tell you, they helped me with the foxxes later on that night. You want to do this as quickly as possible and quietly, so as not to alert attention to yourself or interrupt someone trying to find their dinner. Sometimes you will find that companies have seperate place for perishables as they do white paper, but you arent always so lucky and all those important papers could have some things smeared on them and sometimes it really gross. If you try to find information out about smaller companies, you will see that sometimes they only have one person come in once a week and take out trash, and either because small company is paranoid or stupid I dont know, but trash is taking to another location. This companies servers are a pile of swiss cheese, so i think they janitor is having one out on them. Also I do not recommend wearing your chick getting threads while doing this, because you will smell really bad after and no one will talk to a smelly guy, they just think you some street bum, walking around with big trash bags. And no one like smelly trashy street bum to touch their boobies. It is good idea to take a bag of soda cans with you so just in case some snoopy security guard stops by, you can pretend youre just poor kid trying to get beer money or something nice for your hunnie by collecting cans. This work good around holidays. They might even give you some money as a note of their generous nature to poor kid like you. But they will probably make you climb out of dumpster. At least you dont go in the back of a police car. The goal of the dumpster diving is to get the password and login of some silly employee who work at this big company. Employees don't care about their computer and their companies big neat system. They just care that they get paid and can get drunk on the weekends. So they often write things down and throw them out so us sauve and cool hackers can snatch the infos up and wreak havoc on their system. Also, this could be real important time to get the phone numbers of the hot chicks working at the company. You can save this numbers so once your covert penetration of the company is over you can covertly call them and penetrate their box too!!! haha. Even might be good to date girl so you can find out much information more than in the trash out back. Just make sure she not a gossipy girl and don't tell her what you are up to. Pretend you work at mcdonalds drive thru or work as an exotic male stripper on weekend. Also maybe she give you money to strip for her. BONUS! If you wait until after, you probably should not tell girl either, but you can use this experience to impress girls in the scene who like to do as many hackers as they can. Part Two : Social Engineering Ok, now you have all kinds of paper to rummage through plus select good bonus items. You will look for things like company phone books, time sheets, anything written down on paper, like those yellow things that stick everywhere you stick them, manuals, copies of company issued papers and sometimes you find good hardware that still work and you can put in your system at home. This also be a good place to find magnetic devices such as hard drives and floppies and dont forget cd-r. Just sometimes a hard drive wont boot and some stupid ass system guy say it broke buy a new one because he is too lazy to stop play quake and fix it. They throw it out and it actually is still good and you can then take all the information you want from it and use it to find out about their systems and file structures and even some dumb users with simple passwords. Companies are supposed to erase this material before they throw it out, but if they are too lazy to fix it, they are also too lazy to erase it. Now you have some information about company and its employees you call and pretend you work in the systems department. It is most easiest when doing in a big company, because any company smaller than a 100, the systems guys are well known by name. So you have to at least make sure that company really big if you dont know system guy names, or if small, you know systems guy names. Also, since you will be calling normal person and women who dont know anything about computer and jargon, use as much of it as possible. You really want to plow them over with your knowledge. It is the goal of the social enginner to make the victim on the phone think you are "Andrew" from systems and they are wasting your time for you to have to call them and that you know more about anything to do with the company than they do. And what is good is if they buy that you are 'Andrew' from systems then you do know more than them. It is all in the attitude. Just dont be more than average-cocky of typical system guy to them and mean or they will be suspicious of you possibly and there will be NO PASSWORD FOR YOU. I demonstrate wrong way and right way here as would happen on telephone call. WRONG WAY: Hello, this is victims name here. Hey asshole, this is andy from systems. give me your password or i will tell everyone about the chick with dick porn you have been hiding in your home directory. screw you asshole *click* NO PASSWORD FOR YOU RIGHT WAY: Hello, this is victims name here. Hey victims name. this is andy from systems. just calling to see if you have been having a hard time logging in today. (It is important to use victims name. It makes him think that you the elite sustem guy will be his friend. Everyone wants to be friends with the system guy. They would even let you do their sister) Actually I did earlier, but I think it was because I typed it wrong. (He is hungover like all good employees) No, you did everything ok according to my logs, but we are having some difficulties due to the RAID crash we experienced earlier. Were bringing everything up again server by server, but we will need to manually restore all of our employees home directories chsrc and login information. We need to manually put your password and login in again to make sure all of your information isnt lost and I have to do this for 200 people this morning. (This will scare employee into thinking he dont give you password, he never see his hot photos of big boobied foxxes again) Oh no, here it is, (blurts out user name and password) Ok, great victims name here, I'm doing it right now, you should be able to access everything in your home directory like usual. *hang up* BAZOOKA!! See how is easy?? Silly victim doesnt know that right now as he sits at his cubicle that you are browsing his home directory and possibly using his login and password as a launching pad into the company system. This will make you instantly excited and attractive top the foxxes who come into the channels and want to do you. Andrew @ GOBBLES labs