Defiance
9th October 2005, 22:38
Fast food restaurants, while unhealthy and never provide as good a meal as a full fledge restaurant, make for easy targets for a social engineering attack and can mean free food to anyone who's willing.
There are two ways I use to acquire free food in these restaurants, all of which require a receipt.
To get a receipt, check in after the lunch rush. This could mean hundreds of orders that have to be filled in the period of 5 minutes, so most places will not snooping around or will be tired from the rush to even care. After the lunch rush most people either throw the reciept out with the food, or let it fall to the ground somewhere.
Check to see if the reciept says "drive-through" or what not. If it does, skip to the second one. If it doesn't, stick to method one and two. Also take note- some places mark their receipts for "here" and "to go". If it's marked for "here" then you have to use method 2.
Method 1 - Ask to see a manager. When he comes up, angrily, but NOT too angrily, make a complaint that you bought some food on the run here and had to take it straight back to your job. After getting there and unpacking the food, you realize something is wrong with it. For chicken, say you took a bite into it and it was undercooked and tasted rancid. If it's cheeseburgers or subs or sandwhiches, simply state that you had REQUESTED a topping to be missing because you're allergic to it. The person behind the counter forgot or misunderstood and added it to the food anyway. Make sure you make it sound like you couldn't eat the food, not just didn't like it. This method is the hardest because you're face to face with the manager and need to work it smoothly. Since this is an easy SE though I think it's very good practice for SEing in person. Claim you never got to eat lunch and you were hoping you could get the problem rectified. Give them the reciept. Remember- order exactly whats on the reciept as if you order it all the time. Don't try changing it, as it raises suspicion. You should get a free meal to go. Make sure it's to go, or the manager will pay you more kind attention and learn your face.
Method 2- This method can be used for ALL reciepts, including ones marked for "eating in". On the bottom of all reciepts from fast food restaurants, there should be a phone number for the store. Call it and ask for the manager. Explain to him exactly what you would if you were doing method 1. If the reciept is marked "for here" than throw in a quick bit about how you were going to return the food then for a new one, but with the long lines and short time you had to get back to your job. Say you'll be by in five minutes to pick up the food and was hoping you can get it replaced.
Method 2 is always more secure. If you're found out, you can drive away. You rarely are though. Drive through people rarely look at people's faces so they won't remember you. There's less time and space to ask questions about you, so they have to take the story at face value. On top of this, if you simply wait 5 minutes after calling it makes it look more like you are really coming from the job where, poor you, you couldn't eat your lunch for the day.
note: i personally wouldn't use this form of social engineering unless i was in a complete state of hunger, otherwise i'd use other ways to find food. some may not have a problem with this, but i, for one, just hate lying to people.
There are two ways I use to acquire free food in these restaurants, all of which require a receipt.
To get a receipt, check in after the lunch rush. This could mean hundreds of orders that have to be filled in the period of 5 minutes, so most places will not snooping around or will be tired from the rush to even care. After the lunch rush most people either throw the reciept out with the food, or let it fall to the ground somewhere.
Check to see if the reciept says "drive-through" or what not. If it does, skip to the second one. If it doesn't, stick to method one and two. Also take note- some places mark their receipts for "here" and "to go". If it's marked for "here" then you have to use method 2.
Method 1 - Ask to see a manager. When he comes up, angrily, but NOT too angrily, make a complaint that you bought some food on the run here and had to take it straight back to your job. After getting there and unpacking the food, you realize something is wrong with it. For chicken, say you took a bite into it and it was undercooked and tasted rancid. If it's cheeseburgers or subs or sandwhiches, simply state that you had REQUESTED a topping to be missing because you're allergic to it. The person behind the counter forgot or misunderstood and added it to the food anyway. Make sure you make it sound like you couldn't eat the food, not just didn't like it. This method is the hardest because you're face to face with the manager and need to work it smoothly. Since this is an easy SE though I think it's very good practice for SEing in person. Claim you never got to eat lunch and you were hoping you could get the problem rectified. Give them the reciept. Remember- order exactly whats on the reciept as if you order it all the time. Don't try changing it, as it raises suspicion. You should get a free meal to go. Make sure it's to go, or the manager will pay you more kind attention and learn your face.
Method 2- This method can be used for ALL reciepts, including ones marked for "eating in". On the bottom of all reciepts from fast food restaurants, there should be a phone number for the store. Call it and ask for the manager. Explain to him exactly what you would if you were doing method 1. If the reciept is marked "for here" than throw in a quick bit about how you were going to return the food then for a new one, but with the long lines and short time you had to get back to your job. Say you'll be by in five minutes to pick up the food and was hoping you can get it replaced.
Method 2 is always more secure. If you're found out, you can drive away. You rarely are though. Drive through people rarely look at people's faces so they won't remember you. There's less time and space to ask questions about you, so they have to take the story at face value. On top of this, if you simply wait 5 minutes after calling it makes it look more like you are really coming from the job where, poor you, you couldn't eat your lunch for the day.
note: i personally wouldn't use this form of social engineering unless i was in a complete state of hunger, otherwise i'd use other ways to find food. some may not have a problem with this, but i, for one, just hate lying to people.