A social engineering attack should not appear to be scripted; the social engineer should have the freedom to change according to the circumstances. A scripted attack will appear unnatural and has more chances of failing than succeeding. A scripted attack is based on ideal conditions while an attack occurs under less-than-ideal conditions. All a social engineer should go into an attack with is an outline or a framework and let things fall in line but in a controlled way. There are several ways that one can be spontaneous in any interaction with a target. In addition, these ways can be used in normal life scenarios, not just attacks. These are as follows:
- Not thinking about how you feel: If a social engineer thinks about how he ...