Social Engineering Wargames Site

Team name: Social Re-engineers

Inspiration

Sites like hackthissite, overthewire, and smashthestack and a lack of social engineering based wargames or wargame sites.

Summary

A website hosting multiple self-contained hacking wargame style challenges or challenge sets. Each designed to teach various concepts and methods used in social engineering and to raise awareness in the recognition of when social engineering is being used. (Currently a work in progress but planning on developing long term outside of this hackathon). The intended audience is high school and up.

Educational Design

Learning Objectives

• Learn various concepts/methods in social engineering.
• Learn ways people can leverage info on targets.
• Learn how interconnected personal information can be.
• Learn the potential consequences of releasing seemingly innocuous info to the public.
• Better prepare players to approach interactions (especially online interactions) with others with caution and critical thinking.

Puzzle/Challenge Structure

• The website will consist of multiple challenges/missions for the player to go through under different collections of games grouped based on the core concepts they aim to teach, and organized in ascending order by difficulty.
• Current games: recon & dialogue and social engineering capture the flag.
  • Recon & Dialogue - The player will go through a simulation of gaining access to the online bank account of a fictional character named Alexander Coleman. Will consist of 4 parts:
    1. Finding a username from one of the social media sites of the mark.
    2. Gathering key information on the mark such as likes, dislikes, residence, the schools they attended, etc.
    3. Actually interacting with person. This will be done through dialogue trees.
    4. Combing all of the info gained from steps 1-3 and logging into the mark's bank account through a password reset answering a security question.
  • Social Engineering CTF - The player must call someone, strike up a conversation, and get the person to answer questions from a provided list. Will have multiple lists at different challenge levels.

Play Flow

• Players will select a category of game, and then select a game based on difficulty, being able to start at or change to whatever level they feel comfortable with, ideally working their way up the difficulty ladder.

Storyline

• Each game will have it's own context, with some having storylines and others simply being fun tasks:
  • Recon & Dialogue (work in progress): You are up and coming in the online grifting scene and are tasked with obtaining the banking info of a person named Alexander Coleman. We created accounts for him on Twitter, Facebook, and Instagram for use with this game.
  • Social Engineering CTF: Currently no story.

Built With

• html5
• javascript