Dear viewer, these subtitles were generated by a machine via the service YouTube and therefore are (very) buggy. If you are capable, please help us to create good quality subtitles: https://c3subtitles.de/talk/2508 Thanks!
[Music]
with that uh I would like to introduce
our next speaker kill he will be
speaking about social engineering so
please give a round of applause for
kills thank you thank you wow didn't
expect this size of crowd cool t-shirt
by the way um so my name is KS and um I
think my first chaos event was back in
2010 so it's uh it was a pleasure to be
to all of them
um I run a security company but I do
love social engineering and and talking
to people and getting getting things
achieved um so this presentation is a
very beginner kind of presentation uh
very Hands-On when I was making the
slides I could not avoid to include some
Theory uh at the beginning uh but what I
hope all of you will live with is some
some handson things that you can try
right now with the camp and that you can
try later in the airport or or in in in
the train when going back
home um so yeah these are these are
things we going to talk about you see
them in the in the agenda imagine let's
go through them so what is social
engineering um social engineering is
actually um subf field of offensive
cyber security and social engineering
itself is a is a field that includes
many different sub fields of um ways to
get to get your way um and one thing I
want to focus on really quick and these
are these are the the theory slides so
I'm going to go through them real quick
you're going to have the slides
available uh today on k.org if you
wish but one important thing really one
of the cornerstones to keep in mind is
that when you social engineer an an
organization instead of a single
individual it's always a cycle so you
never you never like start with
preparation then then build some trust
then exploit and then and then you're
done it's never linear it's always a
cycle and it's always a cycle because
you can not and should not ask
everything from a single employee from a
single contact everything at once you
should never do that so the cycle is you
do your research you do your homework
without ever talking to anyone without
ever contacting anyone um then you
target someone some individual uh then
you build trust and then you exploit
that trust relationship uh for your
benefit so this basically the social
engineering attx cycle now once again
real quick I'm going to go through this
real quick I could talk about this slide
for 20 minutes I think but uh so the
attack types that you have in person
right you have in impersonation which is
what most social engineering encounters
are actually based on you pretend to be
someone else entirely or you pretend to
be maybe um a bit higher or a bit
otherwise privileged than you than you
actually are um you can pretend to be
VIP like a CEO of a company if it's a
large company a user calling tech
support or TCH support calling a user uh
you can appeal to authori saying yeah
but the big boss said even though it's
against rules he'll take full
responsibility for that so it sometimes
works reverse social engineering is also
a cool thing right you can um try to
make sure that the person that you are
social engineering We call we call them
the mark uh that they contact you
because actually one of the um hardest
things for a professional social newer
to overcome is Battle for your time
you're there watching a movie working at
with a work document and someone calls
you someone emails you someone
approaches you the hardest thing is
actually to make sure that the person
gives enough attention to you and the
easiest way to work with that is reverse
lotion engineering break their computer
they call
you um identity theft of course you just
stealing someone's photo and name and
making fake Social profile fake uh
driver application and an app and so on
um now for Access we have tailgating and
piggybacking uh the first one is without
the person's knowledge right you try to
enter um a restricted area piggybacking
is with the person's knowledge right so
you you have a fake badge they look at
you they open the door for you uh key
duplication um it's maybe it's not a
very human attack but it does have a
human factor so we're going to talk
about that in a bit as well um uh
acquisition finally so to acquire some
data passively you can e drop going talk
about that you can shoulder Surf and you
can dumpster dive of course my favorite
um it's getting uh harder and harder
with all the green stuff going on and
and trash being divided and and
segregated hate segregation
um but um you can you can actually pay
pay people uh to do that for you you can
teach them how hard drive looks how
flash looks um how document looks and
what you
want now uh for remote attack types uh
we have of course many many like fishing
spear fishing um targeting someone
someone usually over email fishing so
voice solicitation um over the phone
usually app impersonation so creating a
fake app as well it also includes like
an aspect of engineering and a bunch of
others you can you can look up the um
methodology online so uh delivery
vehicles and it's really important to
understand both both for offensive
perspective and defensive perspective uh
it can be emails it can be phone calls
it can be USB drops uh sometimes when
when we have a customer that is really
well trained uh we print their logo on
the USB before we drop it so then you
know someone lost it plug it into the
computer and and and and they try to
find out which colleague lost the USB um
instant messages of course SMS social
networks uh traffic injection um I'm not
sure if if it got fixed so um I I think
Google together with some other browsers
browser manufacturers worked on on on a
standard or something but like 10 years
ago basically when you if you have a
hotspot so in the in the airport and you
need to like click I agree to the rules
that page gets injected and we have htps
and there's an exception so you can kind
of start injecting malware or some
prompts enter your your your PNR so
passenger name record locator uh enter
your surname and bum you you can cancel
someone's flight in the airport stuff
happens um yeah and of course malware
and adware um can also be used for for
for attacks nothing new um some years
ago if you if you googling for um an
anti malare solution the top sponsored
links were were malware so you can
actually inject it that way as
well okay that's that's a theory now
let's go to the the slow
slides so in my opinion there are just
three components to being a social
engineer you have to be confident you
have to be quick witted um and you have
to be
determined um so if we if we take a look
at a confidence trick or or con man
right um it's it's actually shorthand
for confidence man um it's it's an old
term so those are the people that um try
to trick few into into doing stuff like
I was I was walking U um along along
sand in Paris uh 15 15 years 18 years
ago I was first uh I was first
approached by con man um and basically
there are War various tricks they do
right they they dropped a ring and said
oh you lost the ring now it's not yours
okay but you keep it and then it's good
luck it's real gold and then you leave
and 2 seconds later they turned out I
need some money can you help me uh so
those kind of comments right so it comes
from there and basically all they play
on is confidence and it's the same
feature the same thing that we need as a
social engineer um so you have to
project confidence when you are social
engineering someone it's super important
the first step to being able to project
confidence is convincing yourself first
if you're not sure um that you're
confident enough to do that attack then
you cannot you you can you can do it but
you should not do it it will likely work
and don't worry I'll have some other
things some other tips and tricks some
other practical things you can do before
actually performing actual attacks uh so
you can build that up um for the quicked
part you need to be ready to be
challenged because someone is going to
going to challenge you right it it it
happens all the time um basically you
can either be really really on your toes
and be ready to answer anything right
I'll have some examples later on in the
Practical section um or you can try to
substitute it with with a lot of
preparation and I really mean a lot so
you have to like build a mind map of all
the possible questions you're going to
get ask and then you don't need that but
but it's not practical but that's
something you can do and finally you
have to set a goal and work towards it
uh it's easy to get lost on your way to
to trying to achieve your goal as a
social engineer for a specific Target um
but you shouldn't you you always keep
your goal in
mind um actually there's a there's a
song I I'm from Latvia by the way there
a song by uh by by brainstorm uh it's
called there is something to it um and
uh I love I love the song The the song
because of it reminds me of uh one of
the parts one of the integral parts of
my social engineering um and and and how
I do and it it's in Latin here but I'll
translate it for you it goes like this
so I reached out and got it all
according to my list I was amazed man
that's something magical simply focus on
what's important put in a little effort
and look you've got it
um so yeah now a bit about atin how do
you prep for social engineering open
source intelligence is a separate topic
all in all itself you can find lots of
videos on it um and it basically means
we try to collect existing intelligence
from openly available sources so without
accessing any um databases that would
require you to you know hack your
government or something like that um so
what are the sources then we can of
course use web and and the Market
sometimes even though as many of you
know it's overrated but you can you can
take a look in there as well uh social
networks really important metadata um
2023 many companies still do not Purge
metadata so unless your provider like
unless you use Facebook or or or some
kind of Amazon service or something uh
to publish your stuff if your provider
doesn't prune that for you most likely
you're you're well you the targets
employees are publishing stuff with
their name on it um and sometimes
publishing pictures withp locations yeah
right uh all the large social networks
like meta for example uh they they prune
the GPS coordinates because they users
never never learn to do that which is
understandable I guess now Network and
service scans as well it depends on your
local legislation if it's how legal it
is and and how how deep you can scan um
fingerprinting Services of course and
finally uh I can highly recommend the
osin framework at tinf framework.
comom it's a small sample of it so it's
basically you click on a category their
subc it's a mind map and U on on the
leaves of the tree you have different
resources that you can use for um
assisting your social engineer tempt now
for web uh you can of course use Google
dorks uh like that um like that or like
that uh or like that um these are just
some examples that I use uh but um I
think um in exploit in exploit DB
they're the subcategory for Google dorks
um I don't like that it's I mean I
suggest you learn the the actual
qualifiers for Google uh or other search
engines use and and and that's quite
cool right of course you can also get
cash Pages um some other URLs right
paste bin uh sometimes at hiker
conferences or or during leaks uh people
paste stuff on paste bin um online
comments and new sites right uh
different Maps it's really important to
have different map sources so if you
want to scout a location without
actually driving to it uh different map
sources will have what they will have uh
different dates for their live photos or
for their aial photos so you get
different
perspectives um webcams uh there are a
bunch of it people usually leave the
password the password so you can connect
and take a look preemptively uh web
archive work for real archiving purposes
uh tinai like reverse image search it's
the first one that's dedicated to
reverse image search um it's okay once
again it provides different results than
for example Google or uh Microsoft
search uh blockchain info if you're
doing uh if you're doing stuff with
blockchain uh sh an IO um or sensus iio
you can use that as well and different
leaks right I I collect leaks cuz they
sometimes useful and you can you have a
database you can take a look in there um
now to close down the web section of ENT
so there are different people search
engines uh sync me was really really
cool until
2019 uh
because gdpr came in 2018 and it and it
screwed with u us being able to easily
um easily easily access it so Sy me
basically worked in a way that their
selling point was there's this app you
install the app on your phone and if an
unknown number calls you it shows you
the name of the person calling you now
in the license agreement in the user
agreement for the app it said we going
to transfer your phone book to our
servers um so what you could also do is
you could put any random number in there
and you could get the name and surname
um of the person right even uh even
president of of my country lat was there
back back in the day when I tested it
first you can also use Google dork for
uh searching people of course different
public Registries so-called Deep Web
which is not Index right but every
country has their public Registries uh
many of them in Europe at least are
publicly available because of
transparency online news and so on now
and U also we have these uh additional
resources uh for web um that are that
are quite useful now for for social
networks right there are different
social networks any any one that you can
imagine these are the the ones that I
found most useful in my um
escapades um and account recovery
process sometimes gives nice info now
even if your goal is not to take over an
account you can still get some digits
from phone number or domain from an
email address of a person of anonymous
account um very valuable ENT tools on
the site um especially for social
network different readymade tools
nothing super hacky or super super fancy
but it's all in there so you don't have
to waste time searching approaches for
separate social
networks right right on so the next um
the next or the first step is pretext we
talked about it just a bit now we can
talk about it
more so it's part of the preparation
preparation has basically two parts you
research your mark the person you're
going to be attacking and you prepare
your yourself and in preparing yourself
pretext is really important so what's
your role meaning who do you want to
play today right are you going to be the
CEO or are you going to be the employee
that has lost their
password or are you going to be the
mother of a uh employee in distress and
you mother sometimes can be really
convincing on the phone yeah but my my
kid is problem problem and yeah okay I
don't want to deal with that here's your
password um so that's that one's really
important but don't make it too crazy
right don't don't go hello this is
Napoleon Bon part and I'm calling you
because your password has expired
doesn't work I I think well should try
um so it has to be something realistic
right um and by the way before we go to
that um one more thing be ready for
challenges be ready for challenges uh
when choosing your persona for example
where I come from a big part of the
celebrations that we have is name days
right every person um every name every
first name the person has is in the
calendar on specific day so if you're
John or Peter or Anna uh you best know
when your date is in the calendar cuz
people sometimes ask in my in my
experience so you have to you have to
think about the questions they will ask
but we're going to back to that uh going
to get back to that in just a
sec so next thing is why are you doing
this and it it it ties to choosing your
persona so during pretext you have to
choose um a role that facilitates what
you're trying to do here right maybe
choosing CEO of a company if you
forgotten your password may be good in
some cases but probably not not not the
most optimal one you probably choosing a
really annoying and critical employee
would be would be best for that right so
make sure that your role that you've
chosen matches your goal that you're
trying to achieve and once again you
really have to convince yourself first
that you're really that person that
you're pretending uh to be that you're
playing right um I'm going to give you
once again some tips in the end some
practical tips and improv is what what
really really helped me right because I
do actually get the feeling that I'm
that person for that second for that
minute for that half an hour how long
that interaction is going to go and you
have to challenge yourself if it doesn't
work for you you can ask help from
friend but if it does you simply try
okay so I mean we have some hackers here
I imagine um you you like to find bugs
right you try to find vulnerabilities
holes so you have to try to find some
holes in your story um see what happens
if they ask me this is it am I really
that person well maybe what if they ask
me for ID card right it may happen um
you have to I mean that doesn't mean you
have to always make a fake ID card which
is a technique a valid technique uh but
you have to be ready with a response and
by response I don't mean necessarily ver
veriable response I mean if you decide
that you're going to run you can decide
that you're going to run uh but you have
decide beforehand it shouldn't be
decision made there and
then so um a bit about human behavior
and decision- making so um the things
that we're going to work with as social
engineer is one of the things is
everyone loves to help like most people
love to help right also people generally
try to avoid conflict most people don't
don't thrive on conflict they don't they
don't like it so if they are faced with
a reasonable choice of having an
argument or not having an argument many
of them will choose to not have an
argument now and then there are some
people that in life have built up a
skill enough that they make consistently
good
decisions most people make good
decisions on a best effort basis and a
rare person can make a good decision
when rushed so that's another aspect
that we can use uh we can try and ask
the person to hurry up which is why the
scammers that that that that try to give
you a million dollars actually say you
have 20 minutes to do this otherwise
money is gone right because that's
that's just human
nature now there's an there is an
exception or some exceptions to the
first uh part where everyone loves to
help there are some hard targets uh some
roles that are are you know when you
when you've mastered basic soci
engineering you go and try to soci those
guys like guards or people that are
trained to work with external customers
that that you know that try to lie to
them I'll give you I'll give you an
example so um let's say you wanted to um
get a free uh ticket to something right
and and and You' got you'd got the
ticket place and you say okay so my name
is this and this and I have a ticket
reserved if the person is trained to
work with customers they will ask you
for proof of ID or a QR code or
something right but if you manage to
somehow
go to someone that is not trained to
work with customers to a middle manager
or go just outside the working hours
where the customer person's gone they
may not know what to
do so that's the easy
target um I have a story about gar that
I'd like to to share for the for the
first time publicly
um so I was uh I was active in um the
student politics movement uh many years
ago and and um every year in September
there are big celebrations all over the
country of course new students coming in
um and I was in student politics so I
had a I had a I had some drinks lined up
with the recor of University and the
drinks were happening in the same place
where the big event was happening right
and to get to the director's place I had
to go through the VIP and the organizer
time didn't want to give me the
VIP um so I went took a look at the VIP
uh bracelets they were uh black uh black
paper bracelets with text VIP on it um
we have bracelets in in in the office so
I I open up the cabinet I grabbed the
black bracelet didn't print VIP on it um
didn't even try to write it by hand uh
so just a black bracelet so I got into
VIP I was chilling with the director uh
then as tradition is uh at midnight the
director and and uh some student leaders
and and invited guests go to the stage
uh to sing a song and um I was I was
dragged along with um so we are
backstage uh waiting for for to to thing
thing s so now the uh the student
organizers know that I don't have the
VIP so they they talk to a guard and say
hey check that guy out he shouldn't be
here and I hear that so that's one of
one of the things of social engineer you
have to be um receptive to different
things happening around you so I hear
that and now I have I don't know how
many seconds at the time but in reality
I had 15 seconds to think cuz you can't
prepare everything I I had 15 seconds to
decide what I'm going to do when the
guard
comes and I decided uh to move the
bracelet well it was a event with suits
right so I had a suit I decided to move
the bracelet on my hand so I was going
to play I don't have a bracelet and it
worked so he came to me and U and asked
me if I could show with bracelets and I
told him no I'm was the director he went
away um that's it if I if I were to show
him the black bracelet without VIP on it
we might had have had a different
discussion um so you have to be on our
toes right um let's move forward so um
how to leverage social normativity in
perative
situations um I I'm just going to give
you some examples here um it's the first
one isn't actually mine it's from a it's
from a colleague or fellow social
engineer from from the US and that they
sometimes post these stories on on how
they do social engineering engagement
they really love this this part um so in
their company where they work uh they
have a fake pregnancy belly right that
you can put on uh so they have a they
have a female employee uh and at at this
specific Eng engagement she puts on the
belly uh she goes to Starbucks asks for
uh many many coffees as many as you can
you can not coffees cups fills the cups
with water so cheaper um and then tries
to get in right who the hell would not
open the door
right and that's people that's it people
people like to be nice right and uh are
you going to close the door in her face
probably not right and you don't even
you don't mostly you don't even need all
that right you just tailgate someone uh
and if it's a large enough company if
it's rush hour when do we have Rush Hour
well uh during lunch right so people
return from lunch in throws um then when
you can do it that's that's the best
time and people are unlikely to close
the door um in your face
which is you know I mean we do defensive
work as well and it's really hard uh to
to advise my customers what to do it's
it's human nature you can't really
really fix it unless you do some some
some physical things like man traps
where you can't physically W walk in but
yeah it's a different
story now then you can of course just
ask for a favor and if you have enough
time you just wait for for a good hair
day right when a person is happy when
the person is shining uh then you then
you go and go ask can I get free upgrade
the business class
please sometimes works uh uh yeah I mean
uh one one important thing about
corporate world is that um usually
mostly like 99% of the time you're not
talking to the people uh who own the
company's money right the employee
doesn't care if the company loses a
couple hundred EUR it's not I
mean not their problem um then one more
thing is you can hint at creating
conflict and provide an easy way to
avoid it
um and it's really important that there
is an easy way to avoid it uh myself I'm
I'm struggling with with with this one
here um personally I sometimes um entice
a bit too much of a conflict and and and
then the person logs down because they
they see okay there's no way out of this
I'm going to I'm going to buckle down so
you have it has to be light uh and uh it
can't be above the pay grade of whom
you're you're targeting right so if
you're talking to an employee service
level first level support uh and they
don't have the um possibility to to wave
the fees that you want to get waved then
it's it's not going to work either right
you have to escalate it first in in some
way all right so the next part is on
building rapper and Trust um I decided
to not talk about it uh because um
because of time constraints but I do
have a presentation from 2017 uh at
openfest it's on lobbying um and half of
it is is about building rapper and Trust
uh so it basically it basically talks
about how to how to get people to talk
to you or how to get people to like you
um you can you can take a look at it um
if you if you want to want to work with
that part but what's important for
engineering is that this part of
building rapper and Trust can be short
it can be really short and it can be
very long so I'll give you two
contrasting examples uh for the short
one imagine um a scammer somewhere and
and I don't like it but they are also
social Engineers so a scammer somewhere
sending you email saying uh I'm aoleon
bonapart and I owe you $1 million you
can just pay me 100 and I'm going to
transfer to you real real quick
right and in emails like that uh they
try to build trust right there in the
same email so it takes a couple seconds
10 seconds 20 seconds um it's not really
effective for most people but it's a
method and and and for some cases it
works now it can also be very long uh
for example if you if you want to do
wailing uh which means social
engineering an important person um then
what you can do is you can try to
approach them on a social network now
whale will usually not approve random
social social network requests so what
you do is you befriend their employees
or or colleagues or or whomever right
with a fake profile that looks legit um
and when you have a lot of them like 20
30 40 then you can try to send a friend
request as well and then they see oh
okay it looks like one of one of my guys
and uh then they accept right so it can
be really long and really
short now for um exploiting trust it's
kind of it's kind of the easy part right
it's when when when you're in then you
just ask but not really if you ask the
wrong question then you're immediately
out without getting what you need um
first of all always keep the goal of
that specific interaction in mind so
let's say I wanted to um get get the
username and password for uh for the web
page server of of CCC right um on my
first interaction I cannot ask the the
person I'm I'm I'm calling hey what's
the password it it will not work um I
have to set the goal for that
interaction and that goal might be well
I want to know what kind of operating
system it runs right well I could do it
via VI Network SC for example right uh
but I could also um ask right where
where I could um I could do the um
username thing right what's the username
step by step step by
step so always keep that in mind um and
don't ask too much at the same
time I'll give you an example from from
from corpal corporate world so if it's a
lockdown system and you can't really
find anything from online even though
you could use uh job advertisements for
example right if they're searching for
uh Windows 98 engineer then you know
they're running Windows 98 right uh
those are not many of them left um right
uh but in all seriousness some companies
like Banks or airline industry uses some
stuff which is is really fun but first
you have to get in and and getting in is
is is what we're talking about here
today right so uh on the first call I
might try to find out what operating
systems they're actually running and you
don't always have to ask direct
questions for example if I choose that
my role is a user calling Tex support it
would be kind of dumb of me to ask hey
what oper syst are we running right it
could work because tax support expects
users to be like that um but uh I could
also be a bit smarter for example uh I
could not ask that directly I could do a
different thing right I could say my
computer isn't working uh and they would
say okay so what do you see and I I I
would Mumble something like well it's
it's not working and and then I say okay
but but what's on the screen I say well
the usual thing right and then at some
point they got pissed off and they they
just get really angry and they they say
okay do you see that logo with this
color that color and that color in the
lower left score ahuh and I say well uh
I don't know is it round and then I get
the windows version as well um so you
can see and and they are they think they
are requesting information right but
actually they are the ones transferring
bits of information to you uh right um
so yeah and and then when I have that
then I can actually uh call someone else
important don't call the same person
call someone else and and and try to
find out how the usernames are made is
it uh first name last name is there a
dot in between is it some some letters
right um many corporations still at
least the middle ones and the small ones
um still use really dump default
passwords and some of them in my
experience do not allow employees to
change them so if you if you find the
the template of the password then you
can easily uh more easily Brute Force
hashes right or you can even you know
the goal here in any case is to build
trust with the next person next person
as well uh to
pretend that you're one of them and if
you have the in-house knowledge it's
easier to do that it's easier to pretend
okay now let's go to the Practical part
which is the last part um of the
presentation I'm going to start with
some non
oh Liber office I'm going to uh start
with some non- social engineering
exercises actually it's good that we
have that so you can you can try to do
it with your friends first right it
doesn't it doesn't have to be like
someone some some adversary right
someone someone you trust someone you
can play along with right okay was that
out the way so um first of all talking
to people it's it's the first step right
um so I'm sorry if you if you if if if
there are people here that don't like to
talk to people and if you're intent on
keeping it that way then social hearing
is not for you maybe or you can you can
try emails or or or stuff like that or
writing some some fake apps uh yeah but
talking to people is the first thing and
and just just just try like these guys
here you can just try try talking to
each other um
improv uh believe it or not but until uh
16 years old I didn't I didn't even talk
to anyone like I didn't talk to my own
classmates I didn't want to talk to
anyone um impro is a cool thing it still
happens somewhere I'm I'm sure all over
Germany all over the world if you can
sign up for impro it also helps you to
be on your toes when you're challenged
and then you can think of something real
quick alternative personas on your in
your daily life you can you can just try
to pretend to be someone else right once
again not trying to Target anyone just
just walking around you can walk around
the camp you can you can uh pretend to
be uh well don't pretend to be anything
critical please but you can you can
pretend to be uh anyone you like and and
just you can make make up a story not
not for malicious purposes here or or
anything in this presentation is not for
malicious purposes by the way uh
seriously guys uh it's a yeah um but um
just just make up a fake person right um
I remember um when I was actually doing
back when I was doing improv and I was
hitch hacking all over all over Europe
during Summers um I like to when I got
to a city I like to randomly walk up to
people and get them to tell me their
life story and uh my goal there was to
have more
material that I would digest and not
directly present of course that would
digest and and include bits and pieces
of that in my impro uh later on and in
order to get them to open up better I
would take on an alternative Persona
right so that's something you can do
um now and then of course you can
pretend to be someone else online right
catfishing it's not what I'm talking
about here um someone else with a story
right um so um there's
U uh there's there's a thing called uh
post secret um some of you not um
recently there was the that there was a
postcard from from someone that that
wrote that um I go to teens forums and I
talk to um I talk to people um who who
are contemplating doing
suicide uh and um I tell them I'm a
43-year-old uh guy that coaches a metal
band and I'm actually 16-year-old girl
and I've prevented five suicides so far
um so pretending someone else online can
be really beneficial as well and Ben for
you as well to train your social
engineering
skills now then when we've trained that
you can start with passive acquisition
methods they don't require you to
actually uh talk to people and you can
dig for some
trash um you can uh e drop on nearby
employees once again my ears my eyes are
always open when I'm when I even when
I'm communicating with people right
let's say I'm I'm I'm at an agency of
some kind like a travel agency I'm
talking to uh to one person here while
I'm doing that and it's a skill you can
build you can you can try to train it
it's easy when you're not
talking it's harder when you're try to
listen to what people what a person is
telling you when you try to listen at
the next table as well and it's really
hard when you try to talk and listen
what other people are are are telling
saying but you can do that so you can
you can try to e drop on on other
people's stuff and just to build a
skill um you can also shoulder surf
right the cool thing about shoulder
surfing these days is um it doesn't
matter if it's a laptop or a phone right
if you're sitting here with your phone
out someone behind you can can see
what's on your screen they can also see
your keyboard even easier on laptop if a
person types fast uh then they they also
can read what you're typing fast even if
it's a password um so that's that's
another skill you can uh you can hone
Now bump into people uh like uh
physically um well not not here it's
against code of conduct here uh it's a
serious stuff don't don't do that please
but uh you know on on on on train
somewhere uh what's the goal here well
the goal is uh to try copy an RFID tag
that they have right bumping into people
is is the way to go and there are two
criteria that you should meet so um you
can make it a game a single player game
right one is um bump in the most
appropriate way that is most conducive
to tag
copying right and the second way is uh
bump in a way that is the most natural
right so you have these two criteria you
can you can try one you can try the
other like when you win uh try to do
both at the same time and and then you
then you have your
skill now then you build some pretext
and we talked about building pretext
already
um you so you try to think what you
going to do who you going to be and how
are you going to be
challenged now be uncooperative where
you can this is how I still um try to
improve my social skill on a daily basis
for example you can hide your wristband
and see if someone challenges you right
and that's important part here
throughout the presentation um you
should you should stay legal right you
should should should have the right to
do whatever you're doing you can hide
your wristband and um if uh someone
challenges you see if you can talk your
way out of it right yeah I'm with the or
or I'm emergency or I'm going to scan my
QR code in one hour right I mean the
Angels here are really cool um I'm I'm
one of them as well uh don't don't be
don't be terrible to Angels be be nice
to them be nice to everybody uh but you
know if you have The Wristband and you
don't don't don't waste too much of
their time and I mean they they're
standing there being bored you can play
around I
think um you can smile be friendly and
agreeable as a rule um it it also it
opens people people up um it's easier to
talk to them that
way and you can be wagging your
responses if you're if you're challenged
I actually use this one and the next one
to get out of eates on borders I don't
think I've ever scanned my document on
an egate uh when when entering or
leaving European Union
um because in many countries it's
actually I think in all countries it's
not mandatory me because stuff sometimes
doesn't work right justes work so you
got to an agent um and
U I'm doing this you know to train
myself so I mean I'm I'm for example I
was returning to my own country with
documents in in order and everything but
I I just thought okay I'm I'm going to
play um so when I was approaching the
Border in the airport I I saw a lady
that was was going to uh direct me me to
zate and she asked if I have my
passport and I said I have my
documentation with me and she asked if
I'm from if I'm from lattia I said
[Music]
um and couple questions later she sent
me to to to a person to actually get get
checked into the country
um then you can also be dumb again I use
this one to get out of Fates in a in a
different country um abroad so um I I
you know you know why I hate eates and
and back scatter scanners because I know
programmers and I hate technology uh I
mean there are bugs in there for sure
and I don't want to get caught up in
some holding cell because of a bug um so
I always try to to get to a person right
and there um so basically I was walking
straight through so the setup was the no
no barriers like that five machines here
five machines there and you could walk
straight through it I was doing that and
someone stopped me and asked and and
pointed the machine and I gave them my
passport like do what you want and I
gave it back to me and point the machine
uh so I looked at the machine it said
language I pressed English it said uh
please scan your password I put my
password in the machine then it showed
the photo of my face in real time with
no text on it so I was standing like
that for 30 seconds and then it had some
timer on there on screen and then said
Thank you so I took my password and went
through um I mean didn't do anything
illegal I mean I didn't wasn't given an
instruction to you know scan my face or
anything right so then you can continue
with simple everyday things right for
example um airport Fast Track right uh
some of you fly a lot if you if you have
miles or other qualifications U you can
you get airport Fast Track so you can
you know try to not present your
qualifications there and just try to
convince them uh say your flight is late
or or or you know sometime one time I
did by accident this year uh I didn't
know that my qualifications only apply
to to a specific Airline I thought it
was airport but I said okay you you're
here already go go through we're going
to we're going to put put you through as
a as an exception right
um and uh oh another thing I was doing a
technical inspection like
requalification technical relocation of
my motorbike recently and um I was going
to get failed because of one thing not
working on it um well it it a passenger
thing not really important so uh the guy
comes to me well says this thing doesn't
work and
I I immediately without hesitation and
forcefully say yeah it does and I show
him it partially working and he say oh
okay looks like it works
uh
finally uh what not to
do uh do not try to uh leave with stuff
without paying that's theft um at least
offline um do not provide your fake
identity to government agencies that can
probably land you in a lot of pain uh do
not damage other property also can can
lend you in trouble
and my personal policy for the first
fourth Point here is if you do social
engineering that could result in you
getting any Financial benefit make sure
that you've paid for it as well uh I'll
give you two examples for example
business launes when I try to get in I
make sure that I have paid for it before
I try to convince them to let me in for
free or we were hacking uh 10 years ago
I think we were hacking uh Lan well laan
capitals R transportation system public
transportation tickets and we hacked
them successfully and we were when we
were filming the video we actually paid
for the whole day for us to write for
for for money so that we could write
with a fake thing as well and and and
make a video right so it's a it's a good
ethical thing to do I think well uh
thank you so much if we do have some uh
time for questions we can do questions
slides will be on k.org and you can uh
follow me on K social my username is K
thank you so
much
[Applause]
thank you so much KS I think uh we have
time for one question the one question
to rule them all oh my
God no pressure yeah yeah no pressure um
before you start with everything what
kind of precautions do you take on your
own
identity oh how do I protect myself yes
uh well you know I I um I've done I
think seven presentations on privacy so
far dayon k.org and privacy is really
important to me uh but I like to say
that I I I try to stay private for
others sake it's too late for me I mean
I have hundreds of videos on YouTube
with my face and voice don't know how
you call with your own number with your
personal oh yeah yeah yeah do I call
with my own personal number oh no I uh I
I I use a PO Box I call without a number
because I don't have an incoming number
uh
I use anonymous identities online um
basic stuff yeah but uh the presentation
is called nothing to hide it's on k.org
and you can see it live uh in Italy
November and in Canada Quebec in October
if you want to see the news version of
that
one
[Music]
thanks and if the people here at Camp
want to find you now after this talk
where can they find oh yeah I have I
have S Anonymous numbers so you can call
me you can call me at uh 5511 or 5522 or
if you really want of then you can do
5533 uh it's a JSM deck and uh and and
WIP I'm I'm not a hoarder a promise
thanks big round of applause to K thanks
[Applause]
[Music]
man