Elicitation is a valuable tool when collecting information. I like it especially because it is so hard to detect and so easy to use.
1. Avoid asking too many questions
Asking too many questions in a conversation can turn off your target. He’ll start to suspect you want something from them and will stop talking to you. You instead just say your questions as comments and then stop talking. Your target will then likely respond to your comment and won’t feel interrogated.
2. Provocative statements
Saying something provocative to your target can provide you with loads of information. If he agrees with you he’ll elaborate, if he disagrees with you he’ll start to defend himself while disclosing confidential information.
3. False statements
People have a strong tendency to correct false statements. You can take advantage of this by deliberately making false statements about the thing you want to collect information about. Works better with some people than another.
When you question your targets statement he’ll provide more information to get your approval. You can use a third person as a source of the criticism to prevent damaging the relationship with your target.
Everybody want to hear compliments, you can use this to open up your target to provide more information to you. Can be used with any of the techniques above.
The post Elicitation Techniques appeared first on Social Engineering.