Search the Community

Showing results for tags 'Social Engineering'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • General
    • General.Rules, Guidelines and Announcements
    • Nubie HQ
    • General Hacking
    • Old Skool Phreaking
    • LinkZ
    • Hacker Media
    • Hacker Meetings
    • Programming/Code
    • HAM Radio/Hardware Hacking
    • Retail Hacking
    • Urban Exploration And Social Engineering
    • *NIX
    • Graphic Designs
  • BinRev members section
    • Assorted Projects
  • Off-Topic
    • General Chat
    • Scratchytcarrier's Joke-A-Thon

Calendars

  • Community Calendar

Blogs

  • StankDawg: Howling@the.moon
  • Brokennode
  • RedAnthrax the BLOG!!!
  • CETX_var_log
  • The Hillbilly Hacker
  • Exit Status One
  • Bit Bucket
  • 1337_snic's Blog
  • Kotrin's Blog
  • LibbsSecurity E|Hacker Network Security Blog
  • R4p1d's Blog
  • Ohm's Blog
  • Letting the smoke out
  • 1337_snic's Blog
  • 1337_snic's Blog
  • jeremy_.html
  • tekio's blog
  • lattera's Blog
  • The Microwave Rider

Categories

  • Audio
    • Internet Radio shows
    • Miscellaneous
  • Zines
    • Phrack
    • BR Magazine
    • PoC||GTFO
  • Video
    • HackTV

Found 2 results

  1. Hello there, I am a headhunter/recruiter that was recently exposed to this world. Name collecting is something we continually need to do in order to have a potential candidate pool to draw from. We do this via social engineering. Calling into companies, pretending to be someone else, and trying to obtain names of people who have relevant skills for positions we are working on. This is very time consuming and inefficient, but necessary. This is done basically via exchange scanning. We also map out departments as we go as well. Sometimes we encounter dial by name directories on PBX's which are useful for obtaining transfers/extensions if you know a name, but I haven't discovered any other way to exploit this. I personally target about 15 asset management companies who have offices in Tokyo, all of which use various PBX systems like Audix and Cisco. Can anyone think of a way streamline the name collecting process? Is there a way to exploit a PBX for this information? Any ideas would be greatly appreciated. We currently have an entire office dedicated to this name collecting process. I would be happy to compensate anyone who can help to make this effort more efficient. In a perfect world, there would be a way to obtain entire company phone lists.
  2. Hello there, I am a headhunter/recruiter that was recently exposed to this world. Name collecting is something we continually need to do in order to have a potential candidate pool to draw from. We do this via social engineering. Calling into companies, pretending to be someone else, and trying to obtain names of people who have relevant skills for positions we are working on. This is very time consuming and inefficient, but necessary. This is done basically via exchange scanning. We also map out departments as we go as well. Sometimes we encounter dial by name directories on PBX's which are useful for obtaining transfers/extensions if you know a name, but I haven't discovered any other way to exploit this. I personally target about 15 asset management companies who have offices in Tokyo, all of which use various PBX systems like Audix and Cisco. Can anyone think of a way streamline the name collecting process? Is there a way to exploit a PBX for this information? Any ideas would be greatly appreciated. We currently have an entire office dedicated to this name collecting process. I would be happy to compensate anyone who can help to make this effort more efficient. In a perfect world, there would be a way to obtain entire company phone lists.