History of a well-known company of social engineering in one week

The first statement is purely helpful! (But I can also get some information that I am interested in, such as the Code... Database ...)
 
A friend first lost a QQ account to crack the password and email address. This person is the target company's top manager. This is the background information.
 
I found that this person was very active in a forum. ARP cut a password on the Forum and found that it was useless... It seems that I have simplified my opponent's mind.
 
Scan step... The security of all open services is good...
 
In the context of the success rate and timeliness, it seems that the traditional social engineering idea is obviously not suitable. At least I can't do this, But gameover.
 
Learn about the background of the company... I have registered a bunch of forums in related industries of target companies to investigate this company. So, continue to collect information.
 
The target company has been operating for about four years and has a large reputation in the industry. In addition, the goal of a target company of the same type is simple. You can find some industry terminology documents first ..... (It makes sense to find a soft persimmon)
 
Basically, it took me about a week to complete the preparation of the information. On weekends, I made up my mind and watched detective Conan for two days.
 
Finally, the steps for social engineering are developed.
 
A. Access target users with investment relationships
 
B. Use the interest temptation method to gain a deep understanding of the target
 
C competitive psychology social engineering attack implementation (my own name)
 
D. Subsequent penetration and data theft
 
Implementation process:
 
Add QQ friends at on Tuesday morning
 
E: Hello, I saw you publish some projects in your company on the Forum. Would you like to know if this is convenient?
 
T: Which project do you mean? What do you want to know?
 
E: htt: // abbs/is the project. I want to know your progress and the time to test the product.
 
T: You can test it now. Where are you from? What do you do?
 
E: Can I test it first?
 
T: Yes, but you need to provide me your information.
 
E: Are you an employee? Or PM? Or ???
 
T: PM. What do you do?
 
E: Sorry, I haven't reported my E-business card to the customer.
 
E Zhang ** (Assistant General Manager) tel: 150 # @ 4333
 
Henan Province **** Real Estate Development Group email: E@sohu.com
 
T: real estate? It has nothing to do with us. How are you interested in our projects?
 
E: the group is expected to expand three new subsidiaries by the end of the year, including the *** business, but the board wants to invest in mature teams and technologies because it cannot quickly build a team at a time. ..
 
T: I understand it, but I am busy now. Please talk to my assistant about anything.
 
E: It doesn't matter if you are free. I'll discuss your business card with you again?
 
T: T **** (PM) tel: 13323 #$ #4
 
Shanghai **** Information Technology Co., Ltd. email: T@corpmail.com
 
E: Sorry, I still need to ask a question. Are you a technology shareholder in your joint-stock system?
 
T: Well! Is there a problem?
 
E: I just want to know that we were supposed to acquire a team of no more than 3 million yuan, if you are confident that you can bring out your current team and manage it well, isn't it better to leave your company?
 
T: I have not considered this problem. You should test the product first.
 
E: how to test it?
 
T: at present, we can only test it internally. If you want to check it out, I will demonstrate it for you (if you have money, you will have good services, no white eyes, no busy delays)
 
E: Now? I am not very convenient at this moment. Can I wait for a meeting at night? (Change my score)
 
T: What time?
 
E: can it be? (At Am, I want to know if the so-called internal test is a real internal test)
 
T :...... It was already off work.
 
E: Let's talk about the time.
 
T: Okay, so let's do it at (it seems that we can also demonstrate it at, it's not like a pure internal test, or... VPN ?)
 
E: Well, I Went 8 first.
 
T: Goodbye
 
At, I got online... Let him wait for a while to test his patience and temper.
 
T: Hello, please contact me
 
T: Are you ready?
 
E: Sorry, the traffic jam has just arrived.
 
E: How can I see the test?
 
He sent a QQ remote assistance... Just... So lucky. I know more about it.
 
Only two NICs under coffee anti-virus are installed with three Nic icons... Lucky (because one is probably a VPN)
 
After reading a lot of Operation demos, I will start... Continue
 
E: Very good. Is this your main development?
 
T: Yes, www.2cto.com
 
E: How many developers are responsible for development?
 
T: About 30 developers
 
E: Have you ever considered being independent? If you can take the team to think about it like this, right?
 
T: I have not considered it.
 
E: Who should I contact if I have any questions about investment after tomorrow's report?
 
T: You need to contact the marketing department manager, that is, our Vice President ****
 
E: Oh, I know.
 
(It seems that this technology is indeed very focused... Don't eat fresh... Unable to cover him... Set yourself)
 
E: If you are talking to your company...
 
T: Why?
 
E: this investment is not small. You know, if you have no interest in me through the company...
 
T: I don't understand this. You just need to talk to him.
 
E: Well, can you check whether there is any intention to cooperate in this area first?
 
T: No problem. I will answer your question tomorrow.
 
E: Well, contact us tomorrow.
 
The next day, he told me that their Vice President, including the boss, was also very interested... In addition, their boss gave me a call saying that my personal interests can be assured to invite me to Shanghai.
 
Of course I can't, but I also talked to their boss. I'm very interested. Our boss also said it's okay. Next week we will go to Shanghai for specific negotiations.
 
Then T will keep pushing me next week, I keep saying that I have a small problem here. Later, their boss also contacted me to ask me when I used to tell him that another company that has made the same product with you has contacted us. I did a demonstration, but I didn't contact a marketing manager of the company. So the investment was suspended, and my private desires were leaked in the conversation. "Don't worry, I won't let that manager succeed ." of!" It also gives the other party's boss full comfort. "If there is any news, I will immediately inform you, hoping * will always work with me"
 
Two days later, I called his boss and told him about the demo of the other company. I already saw the demo and told them that they wanted T to cooperate with him to find out the shortcomings of the company's products... In this case, I have reason to convince my boss that T's boss would ask T to contact me if he had to go to work. (I bypassed T and asked his boss to tell him that it would be more credible. Let's talk about it when it comes to murder !)
 
Here, I put the root directory of the website of the company that has been infiltrated into a file package named/pdemo.rar with some documents containing a demo.exe file.
 
The following things... You don't have to talk about it. The entire competitive psychology, social engineering attack, has been implemented.
 
In the days that followed, I told T to ask him to give me a detailed document on the comparison between the two products so that I have enough time to read files on his machine... I intercepted the mailbox password, found the vpn account office system account from the mailbox, obtained the two servers after the vpn, and installed the sniffer tool to the end, that is, almost all their company servers. Of course, there are some source code that I want...
 
Conclusion:
 
No real chat records are written for the company name and name, and I am also formatting it. It is troublesome to be seated.
 
There is a poor foundation, so please take this article as a flow account!
 
 
 
Author: h4 ~ 10ph7