Hacker Playbook: Social Engineering

A comprehensive set of flashcards covering key concepts and vocabulary from the lecture on hacking and social engineering.

Hacking

Using a system in ways it was not originally intended.

IKEA Hacking

Creatively re-using IKEA products for unintended purposes.

Social Engineering

Manipulating people into performing actions or revealing information.

Red Team

Practices involving legal safeguards and thorough reporting to test security.

Pre-text

A crafted story or scenario that makes an attack plausible.

Authority & Scarcity

Invoking perceived authority or limited opportunity during social engineering.

Reciprocity

Offering a small favor to receive a larger concession.

Trickster Archetype

A cultural figure exemplified by cunning and deception to achieve goals.

OSINT

Open-source intelligence used in research and planning phases.

Penetration Testing

Legally authorized simulation of a cyber attack to evaluate security.

Illegal Intrusion

Unauthorized access to a system for criminal purposes.

Hackathon

A competitive event where participants invent solutions under fixed rules.

Creative Hacking

Modifying hardware, furniture, or processes for artistic or functional purposes.

Chaos Creation

Fabricating distractions to exploit vulnerable situations.

Piggybacking

Following an authorized person into a secured area without proper access.

Badge Spoofing

Creating fake badges to gain unauthorized access.

Loki

The Norse trickster god, paralleling the deception used in social engineering.

Trust Establishment

The initial step in social engineering to gain cooperation from the target.

Chaos as an Advantage

Using messy situations to distract security and ease unauthorized entry.

Legal Safeguards

Measures taken to ensure ethical practices in hacking and social engineering.

Client Authorization

The legal permission required for lawful penetration testing.

Cunning Deception

Using intelligent tricks to achieve hidden goals.

Cultural Context of Hacking

The backdrop against which hacking is perceived, often inaccurately shaped by media.

Error Exploitation

Leveraging mistakes in security systems for unauthorized access.

Staged Distraction

A premeditated action to divert attention during an attack.

Rehearsal

Practicing tactics to improve the likelihood of success in social engineering.

Security Posture

The overall security status and preparedness of an organization.

Technical Method vs. Intent

Distinguishing between how hacking is performed and the purpose behind it.

Ethical Hacking

Testing systems with permission and for the purpose of identifying vulnerabilities.