Saturday, January 21, 2012

How to Social Engineer Things From Companies For Free. Free Games, Music, Movies, Etc.

Background
I do not thing that stealing from companies is Social Engineering, and to be honest. I wouldn't be writing this, but since the Social Engineering section has been overrun with "I got stuff from this company!" and "Am I going to go to jail?" all because of social engineering's bastard step-cousin. I am writing this guide so it can serve as a definitive reference for all of those interested in fraud. I hope that whenever someone asks about this form of Social Engineering, you'll point them to this guide and keep the forum clean.

Introduction
While the Background section explains WHY I'm doing this, the Introduction section explains WHAT I'm doing. All that SEing Companies entails, is somehow convincing a company to give you their product (or service) without you giving them any money. There are many ways to go about this, many variables, and many methods. Here I will be covering everything you need to get your first product. Before you continue, I will warn you of the danger involved in stealing from major companies. If you do this, and do this often enough, you will, at some point, be found out. That can take many forms, the person who you talk to might just say, "Are you SURE you actually bought that?", you might get an angry email, a warning, a threat, or maybe the person your talking to will just be a bit suspicious. There are many people on here who have experienced it, so I encourage you to read these for more information:

Am I fucked? -
http://adf.ly/4vAQf

I'm Screwed! -
http://adf.ly/4vARj

Warning: Do NOT SE Products From Companies -
http://adf.ly/4vASW

Am I going to Jail? -
http://adf.ly/4vATD

The longer you stay in the Social Engineering section, the more of these you will see. I don't mean to scare you too much, I just want you to know that stealing from companies is NOT Social Engineering, but is more of a sub-section to the former and that it is slightly risky, because you're giving away so much about yourself (address, phone number, name, ect.), if you're still up for it, lets begin.

Point of Entry
Ok, lets begin. I'm not going to discuss choosing the product that you want to SE, because I assume that you already have something in mind, just remember that you'll run a higher risk if you try to SE a computer, than trying to SE a pair of shoes.
With the product in mind, we need to find the point of entry. A point of entry is a way for you to talk to the people who can give you the product. I just give it an awesome name because I'm one cool dude. For this example, I'm going to try to SE a new Logitech Mouse M100, it's a $10 value. The keyboard is make by Logitech, so our point of entry will probably be on the Logitech.com website.
On their website, I see a support page, this is where most websites have their information (live chat, phone numbers, emails, ect.). After a minute or so, I've found their phone number.
1 646-454-3200
But before I call, lets discuss Live Chat.

Live Chat
For my Logitech SE, I can only call them, but I think I should also include information about Live Chat. There are many variations of the cliet, but basically, you are Instant Messaging them. The advantages of Live Chat, is that you don't have to worry about sounding anxious or nervous, you can feel a lot more secure at your computer, and you can take more time than normal to answer tough questions. The main advantage is confidence. However, the people on the other end are a bit more suspicious of people who contact them this way. Simply because of the trolls, hackers, SE'ers, and everyone else that can be lurking on the internet, they might be a bit more cautious, lucky, that doesn't mean that if you give them what they want and say, "BITCH, GIT IT TO ME, please.", you can succeed!

Telephone Calls
Telephone calls are a bit less comfortable because you have to control your voice, and hide your phone number. The good part, is that operators on the other end don't expect SE'ers to be using the phone, they expect the internet. Because of this, if you are able to keep your voice in check, answer questions quickly, and be convincing, you get what you're asking for. However, lets say someone calls you out on your lie, and they have your phone number, you're in trouble. That's why it's important to mask your number when calling. Here is a bit of information:
The first and easiest option is to dial "*67" before dialing their number so I might dial Logitech at: "*67-1-646-454-3200" and my ID would appear as "Private" to them. The only problem is that if a company wants to fuck you over, they can get your phone number even despite *67, they have their ways.
Another way is to use a payphone. I like this one the most, even though you'll need to fork over $1 if the number isn't 1-800 (Most payphones give you free 1-800 calls). If you REALLY want to hide your ass, make sure there are no cameras around. I have a payphone right by my friends house in a dark ally with no cameras and only a few people back there. It's like something out of "Hackers", so I usually use a payphone.
Finally is something called "CallerID Spoofing" this is normally done on the computer if you're using Skype or something similar. I'm not going to go into it, because it requires a whole other tutorial but I can point you here:
http://adf.ly/4vAUv
You'll also find some websites that do this for you. If you think you can get the job done in under 4 minutes, try iCall, that keeps you protected. And by the way, caller ID Spoofing is NOT illegal.

The Conversation
When you get down to it and talk to them they'll say, "How may I help you?" and you need a reason to get the product without paying. The best method (in my opinion) is to say that the package was damaged and there is a crack in the screen, a key from the keyboard has been knocked off and I can find it, the left button of the mouse looks like it's been ripped off, ect. The point is to find a convincing way that the product could be damaged. If you can't think of a good way for it to be damaged use the drop test. Imagine it being dropped and think of the most likely way it will be damaged. A mouse can't be damaged easily so I'll say that the left button has been ripped off and that it's been heavily scratched. Another problematic item is a shirt, but you can always say that you ordered a small and got a large! At this point they will either say, "I'm sorry bro! Keep the old one as a gift to you and we'll ship you a new one!" or they will say, "Pics or it didn't happen". They may want you to give the item back, send a picture, give a model number, or get more information. Here is a solution to all those requests:

"I'm sorry to hear that, would you mind sending us a picture?"

Solution 1:
You can Photoshop a picture you find on the internet to make it look broken. This is a solution but not all of us are good at photoshop, or even HAVE photoshop, other times, you can't find a user-taken photo of the product that they would accept. If you can do it, good job, go ahead and do it! Sometimes you just can't find an "amateur" picture of the product, in this case, ask users on HF, someone's bound to have it!
Solution 2:
You can say you don't have a camera then make a joke like, "My wife would kill me, haha!" at which point they will be instantly suspicious, but it's better than submitting an obliviously fake photo. This is not a good choice.

"I'm sorry to hear that, would you mind sending it back?"
Solution 1:
You can ask them to give you free shipping or send you a box and then just complain about the arrangement until they give up. Not recommended.
Solution 2:
If you said that there was damage to the packaging, say that you complained to the UPS or Fedex first and that you sent it to them. They threw it away and said that the company should give you a new product. Recommended.

"I'm sorry to hear that, could you give me a model number?"
Solution 1:
Ask where it's located, they tell you and you continually say "Are you sure? It's not here!" eventually say, "It looks like it's been scratched up, I can't read it.".
Solution 2:
Say what you said for Solution 2 of the above question. Say you sent it to UPS or FedEx and they threw it away.

They will often be reading from a script and ask these questions, here are the answers I recommend:

Q: "When did you buy the product?"
A: "Err... I'm not sure. I got it for my birthday, maybe a week ago. My wife bought it, it just got here 3 days ago."

Q: "Where did you buy the product?"

A: "My wife bought it for my birthday, so I'm not sure. Probably onlince via your website."

Q: "How did you pay for it?"
A: "My wife used her credit card. I think...."

Your Address
The final question they will ask is, "What is your shipping address?" you do not want to give your address, you're asking for trouble. What you need is called a "drop house" where your stuff is shipped and you can pick it up. You can use a few things, here are the best ones:

One option is getting a P.O. Box. The only problem is that you need to give the government a lot of your information to get one and that's not always a great idea. The other problem is that sometimes companies won't ship to P.O. Boxes because of people using them as "drop houses", haha. But hey, if you've got the info and a god fake identity, as long as the company ships to P.O. Boxes, you're good, bro!

The next option is using an abandoned house. The obvious problem is that you may not live near an abandoned house, but if you do, just make SURE no one gets their mail and use it!

Another house to use is the house next to you. If they are gone when they get there mail, this is great, because you can just snatch your package and return to your house quickly. The only problem is that you are technically stealing your neighbors mail which can land you 10 years in prison, and, if you SE anything too valuable, the UPS will wait until your neighbors are home.

Ohufancyhuh suggested checking realtor sites like
http://adf.ly/4vAVZ in the United States, and

in Canada. What you do, is find a house for sail near you that is listed as ready to be moved in immediately (the previous owners have already left). You can ship the these houses and avoid the hassle of the other options.

Conclusion
There is little to add here, so I'll once again stress that it would be best if you tried your best to keep discussion of this type of SE to a minimum over here. If you need any help or have any questions please ask them in this thread so I can make edits and answer them. If you have anything to add to this guide add it in the comments and I'll edit it into the guide when I see it. I think that we can use this thread for the vast majority of discussion of this type of SEing, thus keeping the forum cleaner! If you liked this tutorial, could you please comment on the thread to keep it alive and let other users see it? Thank you for reading, and I hope you guys like it, it took a long time to make, and it's my first high-quality tutorial!

1 comment:

  1. Iron & Titanium Lining | Titanium - Titanium's Art
    Iron & Titanium Lining in Tithon | titanium watch band Tithon | Tithon titanium nipple bars | titanium plumbing Tithon | Tithon | Tithon 포커 고수 | Tithon citizen promaster titanium | Tithon | Tithon | Tithon | Tithon | Tithon | Tithon | Tithon | Tithon | Tithon | Tithon

    ReplyDelete