DEF CON 25 SE Village - Chris Hadnagy - SE vs Predator: Using SE In Ways I Never Thought

When I started my path down becoming a professional social engineer my vision was something like a modern day version of Sneakers. Instead I was taken down a road that crossed paths with human traffickers, child pornography and the darkest filth on the planet. Out of that darkness I have had the chance to do some truly remarkable things that it is time to share…..

[@ExStaticBass]

Chris, you sir are a badass. I'll be widebanding this one across all my social media.

[@chrishadnagy1175]

Thank you. Seriously. Thank you.

[@Tinera420]

Hey ​@@chrishadnagy1175

[@arndbrack2339]

Gotta give those times some credits - while everyone is busy going crazy, the really good shit is actually still out there! great man, thank you!

[@_randombob]

Great talk, I like the jackpot bleeps.

[@LakeVermilionDreams]

Three human traffickers downvoted this video. I'm even more glad to be a fan of Clutch! This talk is awesome, and I'll do what I can to help Polaris Project!

[@chrishadnagy1175]

Clutch is amazing. And yah just makes you love Neil even more right?

[@ledzeppeman]

Whoah, I've never been first before. Good talk. Well presented too. Very likable speaker. Quality content.

[@chrishadnagy1175]

Congrats!

[@Catalinanative]

How can I get this job opportunity

[@AprilWrightFTW]

...Break the class rules, Chris. It's ok

[@chrishadnagy1175]

Love you April

[@Kas_Styles]

Great talk. And I agree.

[@MushroomNinja]

Love your talks Chris. With that said, why don't you teach your students the dark arts of SE? You just said dealing with people like those at 13:00 throws all rules you teach out the window. If you ever retire, how can your students expect to continue your legacy to catch these people? Just putting it out there

[@chrishadnagy1175]

So i do teach some... but not all. Most people who come to the class want to learn how to protect their corps, families etc and for that we don't need the dark arts. But I am not a one man army. I need lots of help. So we do work, teach and grow... Thank you!

[@MushroomNinja]

Chris Hadnagy thank you for replying!

[@electrontube]

strong.

[@ethansimmons82]

This man is beautiful

[@johnnyjetson1713]

it's a few years later and I've heard about that wallpaper app bro, a million hugs and thank yous 😬 I hope you get the support you deserve and from what I've seen, POTUS 45 also wants you to succeed doing this - I hope you 2 get together sometime 👍

[@FennecTECH]

Isnt SEing innocents to get info on the people illigal?

[@ledzeppeman]

FennecTECH It's obviously illegal whether or not the subject is guilty. He was authorized to gather this intel, and that supercedes due process.

[@chrishadnagy1175]

Actually if I can step in here. It is a good question sir. We only used OSINT (open source intelligence) and did not hack anything. Gathering of info is NOT illegal. We all do it every day. If I then posted that on a website and you went and hung him, that would be illegal. But instead we hand it all over to the cops and feds and they look at that person and determine guilt and then move forward. So nothing we did was illegal. Thanks for the great question.

[@ledzeppeman]

Wow, hey. Thanks for correcting me. My mistake.

[@haxwithaxe]

asking questions isn't illegal in most places. asking them in ways that elicit answers you want is very very legal in the USA.

[@__-pf6sh]

Despite the speech being pretty interesting, not sure if that can be useful everywhere. In the US, it seems to be fine to collect information. In France for instance, I'm quite sure that goes against the penal code (226-16). "The fact, including by negligence, to proceed or to ask to proceed to the processing of personal data without having been complied with the formalities required for their implementation provided for by law is punishable by 5 years imprisonment and 300,000 euros fine" (collecting nfo seems to be part of "processing"). Maybe your lawyer knows some international laws and could confirm that but I think you guys walk on thicker ice. If I go to the police with a maltego mapping, logs and call recordings, you can be sure that I'll be the one behind the bars before even opening my mouth; and I'll need to remember to withdraw 300 grands on my way to the station. Unless I go by the formalities and get consent from the target ("Excuse me Sir, can I dox you for a sec, I'll need this, that and that, sign here, kthxbyemonami") or if the police does it.

[@colepat015]

Those phone calls were super fake... even if tone change and speed changed.... That was being read from a script...

[@Seth9809]

Acting may sound like it's from a script, and you were told he's not telling the truth to them, so you already are primed to see what he said as fake.