Gathering information for social engineering attack cyber security

Quick overview

Field	Detail
Topic	information
Guide	Gathering information for social engineering attack cyber security
Tags	information, many, social, engineering, attack, security
Length	About 1071 words
Practice rule	Authorized labs only — stay ethical

Social engineering attacks are one of the most dangerous attacks among us. If you are associated with the field of cyber security, then you…

---

Gathering information for social engineering attack cyber security

Social engineering attacks are one of the most dangerous attacks among us. If you are associated with the field of cyber security, then you will know what is involved in it.

First of all, it is very important to understand what social engineering attacks are. In what ways can an excellent social engineering attack be done?

The purpose of this article is not to collect anyone’s personal information. It is illegal to conduct cyber attacks on anyone. You may have to be fined heavily for this. This article of mine is only to inform and teach people so that they can avoid the trouble. Thank you.

Hello my name is Imran and in this lecture we will understand about social engineering attack and see what techniques can be used for it.

Social engineering attack is a type of cyber attack that can attack and collect your personal information in any way. To understand this thing, it is necessary to know the elements of many things, for example, for whom he will contact you and in what ways he can do it.

Photo by Markus Winkler on Unsplash

The most important thing that is taken into consideration during a social engineering attack is the psychology of any person. When a person starts playing with someone’s psyche, he starts examining him from within and tries to see his vulnerabilities.

You must have heard about small attacks in which they collect information from you. But have you ever thought that what is studied in Advanced Social Engineering Attic is the most descriptive.

The things kept in them are as follows. Throwing in a malicious virus attack, using a duplicate link, hijacking a session, engaging with a friend of the staff or engaging with a criminal.

Or using a technique that is not even in anyone’s mind. Let’s see an example of how I looked inside the bank , government and other offices , last time.

I started going to various government offices and banks and started examining each and every thing there. What is going on there, the places they used to go, the links they clicked on and the operating systems they used. I started fixing it without telling anyone so that I could get an idea of what problems I might face when attacking the place I want to attack.

I realized that many operating systems used in banks were victims of piracy. That is, they were not updated and these were not small banks, they were very big and famous banks.

Photo by ThisisEngineering RAEng on Unsplash

Collecting data from general public record:

It is very important to know where you are collecting the information you are collecting. Many people go to the third party website for information or such a website where the data is available and its information is also correct. Most of this data is collected from the dark web, which contains information ranging from current card information to your“ social security number, ITIN number, IRS and other information, ”this information is enough to make anyone’s mind spin.

Let’s see how this data works and how it is put to use

For this purpose some things are used which are very important for them to format the data properly so that whoever is calling or sending the information will not have any doubt about the thing. In many places, the data related to this thing is taken by itself, hackers can do anything and sometimes they can use talaq tactics.

The picture below will help you a lot to figure out what is going on

Truepeoplesearch , fastpeoplesearch , And many other such websites which are made for general public records are misused, information is shared here and related to the same information and data is extracted and its formatting is done.

Basic information can be many things. They can find out about you, where you are from, where you have been, where you live, how many people are in your family and what they do, even what you ate yesterday.

Much of the information for social engineering is exploited and manipulated in many ways.

Most of the attacks that I have done so far have been through the information network. The network is something that throws out a lot of your personal information. When you don’t have a good knowledge of the network, you take a lot of trouble for free.

For this, first of all, your Wi-Fi network or local network is hacked and your security is broken. So that they can see what is happening with you and what you are doing at the moment. Which mobile are you using? This is mostly done when you are keeping very sensitive information and someone knows about it.

Wireshark is one such tool used to check network security along with many other tools including Aircrack NG and WPS security exploit and cracking tools. These tools include hacking into the network.

User Infor Browser .

In the image below you can see that I used a wireframe and there is a lot of information there. This information is actually from the Facebook user agent. That I had logged in and that request was not saved meant that someone had my password and I could go through the network to see their password. When your user agent is stolen. So it means that there is a high chance of bypassing your double authentication.

General information collection:

Malto is a tool for social engineering attack. This tool is so powerful that it gives many informations that can be given to different tools. But after running different commands, it consists of graphical interface and CSP. It also provides records with such capacity that it can scan the internet deeply.

There are many tools related to this on the internet, but for this you need to know programming command lines at a very good level. The need for knowledge is more accessible here too, but here things get much better in the graphical interface.

If you are interested in learning cyber security, I can tell you about many things in my next lecture. There are many lectures that I am making myself, usually I keep updating my lectures so that people can benefit more.

Frequently asked questions

What is this guide about information?

Gathering information for social engineering attack cyber security explains practical, ethical notes on information. Use it as a structured walkthrough — then practice only in authorized labs.

Who is this information article for?

Readers who want clear, street-level guidance on information without hype. Beginners and intermediate practitioners both benefit.

How do I practice information safely?

Stay in scope: systems you own or have written permission to test. Keep notes, verify findings, and never attack live targets without authorization.