Wednesday, September 17, 2008

Helpdesks can be so helpful!!!!!!

So.... I recently did a Social Engineering project for a major US financial institution. The goal was to try and get someone at the helpdesk to reset a users password. This helpdesk was in Ft. Wayne Indiana. I found the user name through some google searches on the company and had previously called another one of there helpdesks where they generously gave me the format of user ids..... Here is a play by play of how this went down....

HD - Helpdesk, Charlie speaking
me - Hey Charlie, I think I'm having a problem with my passwd
HD - What is the problem?
me - I just got back from a break and when I tried to unlock my computer it said the password was no good
HD - alright, that happens from time to time..What's your user id ?
me - v3pXXX
HD - John Doe?
me - yeah, that's me.
HD - like I said, this happens sometimes, the only way to fix this is to reboot your computer and start over
me - alright, so just hit the power button?
HD - yeah, you will have to since you can't log back in
me - alright..hold on i guess this will take a minute
HD - alright, I'll stay on the phone with you to make sure you get in alright....
(Pause for 10-15 secs)
me - so did you watch the hall of fame game last night?
HD - Yeah, I watched a little bit, but it's hard to get excited about preseason football.. You a colts fan?
me - of course!!!!!!
HD - Oh, I'm a cowboys fan
me - the cowboys should be very good this year now that they fixed there secondary, I think they'll probably win there division
HD - yeah, if they can get past the Giants
me - alright, I'm back.... nope just tried to login, still says my password is no good.... I know I'm typing the right password!
HD - are you sure the caps lock is not on?
me - oh, let me try it again... (put phone close to keyboard so he could hear me hitting keys ) nope still didn't work....
HD - alright, looks like we are gonna have to reset your password...What's your employee number?
me - 529406
HD - 529406??? should be a 5 digit number
me - Oh sorry....11865
HD - no, that's not what I have on file with you...it should begin with a 2
me - no, it's definitely 11865
HD - is that the number you log on to ??????? system with?
me - yeah
HD - well we can go ahead and reset your password.. Hopefully there will not be a problem with ??? system
HD- What's your current password?
me - aren't we not supposed to give out our passwords to anyone?
HD - it's alright, you can give it to us, sometimes we can login as you without having to reset your password
me - Oh, I didn't know that, I remember going to some training and they said not to give your password to anyone...
HD - yeah, that's right, tell you what, I can just reset your password, and it'll force you to change it.. try Summer08
me - (phone next to keyboard again) alright, cool... it worked, now its asking me to change my password...thanks alot!
HD - Your'e welcome....have a good day
me - thanks...you too!

No comments: