Analysis on Several misunderstandings of social engineering
Please add and correct your mistakes
Misunderstanding 1: Social engineering is a scam and advanced scam.
Misunderstanding 2: social engineering search and intelligence capabilities
Misunderstanding 3: Deception + intelligence collection are social engineering, and social engineering must include deception and intelligence collection
(Wait for others to add)
-------------------------------------------------------
Social Engineering
Society: people are made up of people and communicate with each other.
Therefore, social engineering should analyze human nature and explore people's hearts. Instead of simply a technology.
You can use him to deceive people and collect the desired data, but you can also use him to gain others' trust and make good friends. Create high-quality interpersonal relationships in your career.
Counterargument
I:
I think. Anyone with experience in social engineering will not agree with this idea. Because we don't have to lie to social workers.
II:
If we only collect target information in the network and in reality, rather than starting from his inner and human thinking, we cannot become a social worker. Because there is no "person" element.
3: Here is the focus. If an advanced social worker does not have to collect target information, but can achieve the goal from the beginning of communication, his purpose may not be an intelligence, instead, let the target achieve a goal, such as restarting the server.
Similarly, a social worker can guess the password or control the target network from the reality or the network by analyzing the personality of the target, psychology = some "people" elements, it is also a social worker who does not communicate with any personnel on the target network, even if it is a byte.
It can be irresponsible to say that "all the skills involved in analyzing and using human nature are part of social engineering"