Now, the real magic, after a couple of months, the attacker could approach the victim and claim to have root access to the server by showing some files in the /root directory. The victim would log into the server and check if those files actually were in /root (as claimed by the attacker) and after finding they were and checking directory permissions (only readable/writable by root) what would be the only logical explanation for this? Well, in 99% of cases, the victim would believe the machine was compromised when in fact it was pure social engineering.
Sasa, uchawi halisi, baada ya miezi michache, mshambuliaji inaweza mbinu mwathirika na kudai kuwa na mizizi kupata server kwa kuonyesha baadhi ya files katika saraka / mizizi. mwathirika bila kuingia katika server na kuangalia kama wale files kweli walikuwa katika mizizi / (kama inavyodaiwa na mshambulizi) na baada ya kupata walikuwa na kuangalia ruhusa directory (tu someka / writable na mizizi) nini itakuwa tu maelezo kwa mantiki hii? Vizuri, katika 99% ya kesi, mwathirika naamini mashine iliingiliwa wakati ukweli ni safi uhandisi ya kijamii.