Social Engineering Tales of the Pirate Queen

okay first question who came here to hear stories about social engineering of the pirate queen okay so you have been socially engineered so disclaimer it's not really about stories so I thought if they would attract people but it's more about my research into social engineering and psychology and you will see so that's me charkha people call me sharks I also here by my other persona but I'll tell you about I liked her so in my free time I do kendo it's a Japanese martial arts not as everyone says I'm not beating people with sticks it's a Swart so yeah that's a free time in my free time I'm hunting buck so right now under hacker one and cynic

rights team before hacking took over my life I did a lot surround music so this is my last gig as VJ so even though it's a life event I'm still back behind a computer I'm become community so you can find me people around me know that I'm part of a while in Chester I'm also one of the cofounders of the Paris group yeah this is a Paris Def Con group that we have people here I'm also ambassador for besides Athens so I'm sort of like all over the place um another thing we just started me and Chrissy we just start a new project called Mizzou I'll explain about it later that's all of this is my just free

time so this is where I work so sure cloud it's amazing company I do I get to do everything from web application infrastructure payment systems to social engineering so what happened when I was doing the interviews I kept saying like I wanted all social engineering and physical security in the company is great it listening to you so what happened my boss called me a week before I was meant to study psych so what would you say your first engagement will be social engineering you have two days you need to get into three offices okay well needless to say the first day I got into server room walked out with the laptop and some sensitive documents so

I'm glad they trust me so the pirate queen that we were talking about so she's my alter-ego that I use but originally she actually existed she was super kick-ass so when her dad didn't want to take her with him so what she did she cut her hair and she's socially engineered her way onto the ship so yeah that's why I love her but the gray Somali of the 21st century is a social engineer so she does all these things using fake IDs this I love this is one of my client so he sent me a picture of what they have from their internet so that was pretty funny so social engineering I'm not sure if

everyone knows but originally it was the political side it is still political science so it was they said that as machines need engineers people need social engineers so it was probably a good thing or it was meant to me but it was then late used for social engineering campaigns in authoritarian governments like Soviet Union Chinese government or Khmer genocides in Cambodia but probably everyone knows this right so this is a perfect example it's a mass manipulation using a data on people as we know it people are always asking what is it what is it that you do to like break into buildings like super spy but it's more lots of googling google dorks to Google

Earth gathering open-source intelligence lots of courage our studying page peoples face expressions analyzing everyone's body language you can see me maybe later oh and I'll be just sitting in a corner and looking at people's feet and hands and sometimes let's apply so it's more of course more than that I see it as these like a three phases so the preface is the one where you do all the fishing fishing all the issues and it's also so it's gathering the Osun for your free text and it's the is the remote part of what you're doing the second phase the action phases I call it is the direct interaction with your target it's where you need to manipulate the people to get

where you need to go where the third one it's I call it get da and get out which is what most people do but I think getting domain admin is not it's not just about that you of course you said ow you try to find a vacant meeting room and you get in perfectly so that if they don't have knock you can run your responder and like you do what you do but I think it's important to understand to who's the customer so is it a financial company so I'm gonna go and I'm gonna target their financial department try to extract documents from there or steal someone's laptop my favorite pretext you just walk to

someone and you're like just high enough so everyone hears around you're like I'm coming from IT there is issues with your laptop we are seeing some strange behavior it looks like when you visited some of the porn sites you got infected the guys so just like gets right and me stuff like pushing you and so I keep like yeah we need we need we need to do like I do forensic so like I'm gonna take it it's like yep this thing it's just dope so but so yeah the third face is more about computers and we know how to make them behave or misbehave but they are predict Cybil but why i want what i want to talk

about is the second phase because it's about hacking people and they are not flexible most in most cases so who can be our target security guards yes but not really like this I wish it's not as bad it could get to this but it's mostly like this other targets are receptionist or just workers in an office usually everyone is super busy so if you sit down and ask if you can take a seat connect to the network yeah sure or this is one of my last engagements like there is no target and there is even a badge on the table story so I did I do what I do so I stole it and I and I

am I and I sort of went through barriers and because the there were the elevators were armed with the card readers and then I look at it and it was not my client oops so I actually had to go back and had to put it bite it like just by the time I already actually went to the building from parking lots and went through like seven doors armed with card reader so like this was just like a I thought I will just get another fat like leg store but yeah didn't really need it so what do they have in common our targets their human right and what all humans have our command and control server so just to

explain so in the brain there are three different brains so the reptilian one is the oldest one it's all the instincts but all the instincts are then the react Asians are done by the limbic brain and then you have neocortex is the neo new brain so the limbic brain that is showing the the reactions is the brain of truth it's the one what we are looking out for whereas the neocortex is the thinking brain it's the line right so we know that there are probably one knows fight and flight there is actually a third one so fight please don't fight your customers if you if they will want to fight you just fight the third one is

not this but it's talking about cats when they are attacking and I think you can see a lot in nature you can see that there when they try to attack like an antelope cantaloupe freezes so that's the that's the third it's fight flight and free sexual if freeze was added around 2002 but it's it's it's one of the three reactions so pacifying behaviors these are the behaviors that you can see in your targets when you talking to them when they are not in a calm state it's when they are soothing themselves the brain is like sending out like help me like I'm stressed like do something so people we will see what kind of behaviors we can it actually

they are but they are all together they're called pacifying behaviors so who can tell me which part of the body is the most honest one where would you look yeah but like word feet I tends feet and as it go as it up there is unless unless honesty which is quite interesting because we are usually reading face and maybe hands but feet like I'll I'll show you what kind of behaviour to look out for but if you're what I usually do when I get approached by maybe let's say a security guard I usually pretend to look for something in my pockets and I look at his feet I had here was a security guard that

obviously was the smiley nice one but and that's another behavior that I will talk about like in the face I saw he saw me his eyebrows went up so there was like I said like a shock and then it then he said like I squinted so I knew they he knew that I didn't belong I laid - actually I like to go told that this guy knows like all 800 employees in the building and this guy comes to me he's like are you visiting and and has his feet like this so like an L which meant I have to ask you but I want to get away so what I did I personal space I'll talk about it

afterwards as well so I sort of did a step forward to make him less comfortable and then I kept making it serve like longer and longer although all the answers and questions so he's like more important comfortable so at the point where he was like can you show me a badge that was just my piece of paper printed on my 20 pound printer so when I flashed it he was like yeah go just he didn't want to deal with me anymore so yeah he said this is a really interesting part so why the face is the is the most lying one is the face because since you're born you're told don't make this face look happy or so

face is the one where that's most like important and I will talk about it a lot baseline look for clusters who's been so like you need to understand the person it could be that they look they look nervous they are topping they feed or hands but it could be medical condition so you need to baseline them and look for clusters of behaviors so it's hardly tapping their feet and the hands as well so it's more of a being sure so gravity defying behaviors are that's the positive one so like you can if person is like all happy like you can tell except a hat so if so if someone like loses have head up like this means

that their search territory territorial and that's not a positive behavior mirroring behaviors that's the feelings of trust interest of liking I I see the lot is really interesting it's I've served like try this you like when I touch my glasses and I it's a receptionist that obviously likes me she touches her forehead as well even like without the glasses it's really interesting and you can see like people are so if you're doing stuff here they'd they'd do it as well it's a good way how to make sure that your target you're feeling like is liking you and trust your pretext actually trust you so mold your targets perception rally taste objective but your perception of

reality is subjective so there is one reality but that we have perception of the reality is different for everyone else and it's like a lens through which people are looking at the reality so if we can out to those lens we can alternate reality in a way it's a it's from a book from Nicole and the methods of persuasion sofie's and me so feet shifting direction I was talking about it it shows how the person really feels I love to like watch in a restaurant so like sometimes you see a couple when one of them is serve like pointing out the person likely doesn't want to be there knee clasping so it's like when they're

holding their feet and I see the lots when I approach someone in an office that I'm just social engineering and I'm asking something that they do this it looks like they just want to go they don't want to be there they don't want to deal with me and they're really nervous so I try to social engineering them into feeling better so like crossing is the opposite of foot and ankle looking so leg crossing do you what do you think is it positive that is the person feeling come or are they stressed stress come they are they're calm because going back to fight flight freeze if you are like this you can't do anything you can like you're you're

losing your balance so that means that the part that the person trusts you and they feel really good about you so I see it sometimes where it's a security guard that come comes up to me and say about what you're doing here there dip and you're like well like this like they want to be helpful so significant change in intensity so again I was talking about the base signing so it could be that someone is stopping their feet all the time so you need to look out for maybe then stop stopping so that it means that they're stressed so torso hip chest and shoulders this part of I have most of the vital organs so you have

heart intestines genitals so it's a part of the body that also shows lots of lots of reactions so leaning away towards you that's normal like when it's about the personal space so you can see if the person trusts you or not so I see that a lot so it's either it could be either arms so they're like putting a barrier between you or I see it a lot just couple days ago I was social engineering one receptionist and she was so nervous she was like grabbing stuff and like putting it on the table in front like between us because she was like building just yeah but she gave me an all-access pass anyway so yeah I

talked about the personal space so the shoulders sometimes you see it as well you ask someone something and they like serve they look like a turtle so it's like they're there they're not sure about themselves so arms you can see this is a arms akimbo it's like a very territorial I see it a lot with like a police officers you can see probably around but I see it a lot with security guards because they're just sure of themselves for you what's important just they've normal like people that are stressed are going into the freeze reaction so it's like a you're trying to pray the next like you're not there you're trying to be invisible and that

doesn't look invisible tattoos it's a good it's a good speaking point so if you're seeing people with tattoos you can serve decide what's your what's your approach to your target hence fingers so keep them visible so it's just it's a thing so you're you're being seen as not someone that they can trust so keep them somewhere where they can see them again nervous hands I was talking about the contacts so you need to understand who the person is which is yeah it's difficult because it's usually you're stressed and you need to assess them on based on a couple of seconds they're just walking up to you word yeah it's really important so steepling so is

barnes doing so that's like a it's like a evil kind of thing but it means it actually means high confidence but it could change into the hand ranging which is the next one which is the opposite so you can understand sometimes it's the it goes from this I I come come to the receptionist and I say hey um and I'm being nice and she's like okay can I help you and I start like the IT lingo so she serves like she just lets me go she doesn't have any questions and she goes into hand ranging so means like she's it's good for me because if she doesn't understand then she's more likely to to let me go touching neck so

that's a that's a pacified pacifying behavior we were talking about it's a man usually they are touching their neck because they're like served trying to it's the blood flow they're trying to calm themselves down whereas for women they're touching the neck dimple or they are playing with whatever they have like a jewelry I saw it so the reception is that I social engineered this week we then had walk through with the with a client and she still kept calling me grace and I was like can I tell her like it I just felt really bad so like I told her and she was just look at me and she had this like a like a jeweler she was just

throwing in like this she's like okay I'm like it's fine like you know so face we're talking about macro and micro expressions so micro expressions are fake usually or can be faked smile can be faked you can tell difference when someone is really smiling honestly but it can be faked so micro expressions are like a data leaks of your face so they're all about 125th of a second but they are universal and it's it's great thing to actually learn them I will talk about a little bit later I did did anyone see you lie to me so that's exactly from there and it's based on Paul Ekman and Paul Ekman actually has like a training and it's

online and it's great it's it's it goes like $200 but it's worth it it teaches you everything and I've been studying it like 98% accurate accurate so in my test and it helps a lot so yeah anger as you can see like you you will probably see some teeth and some the nose and it serves like similar to fear but the eyes are bigger in fear so but it's really difficult than if you're being tested on the micro-expressions and it really just flashes it's just a moment it's kind of difficult to see but yeah so said yeah we can go like your your I believe it's go like a my mouth purse so like you do

this thing this disgust so it's it's again you can tell by the nose and front surprise open mouth big eyes content I would say one thing I do this a lot myself back to baseline it's like I'm not served jerk most of the time but it's just what I do so it's it's important it's important to baseline like yeah what I usually say it's like the best part of me is grace so my dad so I wrote an article for SEO magazine and my dad called me it was like so I wrote the article and I researched a little bit about social engineering and then like a pause he's like are you a bad person

like no it's grace so yeah so unhappiness you can you that's really easy so you can as well read your target based on their physical traits so this is from a book about from Chinese medicine but it makes sense because these lines these are expressions that are using quite often so you can use even the wrinkles on your on your on your targets face to understand who they are or how they are so what I wish I knew before diving headfirst I don't know is there I'm guessing you wanted to start social engineering as well you want to learn right so for me I would say builder built an alter-ego or another persona it's just if someone

asked you at the bar hey how are you what's your name grace and then you can build it that that person hides by now if someone would shout grace in in the street I would turn around but it was it was the first socially injuring that I did so and I was so I was pretending to be auditing asset IDs and this guy was over helpful so he led me to server room as well because I of course needed to check the asset ID using the service as well and then I'm just like whoa like I really did it like I'm in a server room like how is that possible and that was in my head of course and then the guy is

like Gracie Gracie and and I'm looking at him like blank because like at that point it was my first social engineering guy was not like one with my social engineering alter-ego so I think that's really that's really important and you can do that before actually any social engineering top as I said please don't break into buildings without contract or get-out-of-jail-free card so yeah just I said it right just no one can blame me on to it reach out to other social engineers that you probably know on Twitter it could be me or in my case I reached out to check hide hide and seek she is amazing she's very lovely and she was so helpful and

it helped me a lot so I really recommend that read people be maybe don't be like me don't sit in a corner but like just look around look around how people interact it's I love to look at people like when you're in the restaurant when they are on date that's interesting what I can I like it's blind date shows on YouTube I've been watching so it's really interesting because they let the people they come blindfold it they sit down and then they take the them off and then you can see like the first reaction and it's usually they sort of try to be either like cool that but you can sometimes see like the disgust or like a

and what's great like then towards the end they say there are there is a specific one I don't remember the name I can tell you afterwards there is specific one where they say towards the end when I first saw you I would date you and then they say afterwards how the talking to them change but it's really interesting because it's a real interaction and there is lots of date le king of they face yeah so books I read read those I am served through the phase reading in Chinese medicine because it's huge but that helps as well there is lots of that I would like to that I would like to cover but I don't have

time so watch me and Chrissy under Mizzou I then give you all these details you can reach out to me and have a look at Mizzou for our future research where we are doing currently RFID and Brooks mark and there is some great stuff going on that's it