mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
53 lines
1.9 KiB
Markdown
53 lines
1.9 KiB
Markdown
# Social Engineering Pretext Call — API Reference
|
|
|
|
## Libraries
|
|
|
|
| Library | Install | Purpose |
|
|
|---------|---------|---------|
|
|
| requests | `pip install requests` | API integration with tracking platforms |
|
|
| twilio | `pip install twilio` | Programmatic phone call management |
|
|
| jinja2 | `pip install Jinja2` | Pretext script template rendering |
|
|
|
|
## Pretext Call Phases
|
|
|
|
| Phase | Description |
|
|
|-------|-------------|
|
|
| Reconnaissance | Research target name, role, department, reporting chain |
|
|
| Pretext Development | Create believable scenario and script |
|
|
| Call Execution | Make the call, follow script, adapt to responses |
|
|
| Documentation | Record outcome, information obtained, duration |
|
|
| Analysis | Calculate success rates, identify vulnerable departments |
|
|
|
|
## Success Criteria Categories
|
|
|
|
| Category | Description |
|
|
|----------|-------------|
|
|
| Full Success | Target provided credentials, access, or completed action |
|
|
| Partial Success | Target revealed organizational info but not credentials |
|
|
| Failed | Target refused or became suspicious |
|
|
| Reported | Target reported the call to security team |
|
|
|
|
## Key Metrics
|
|
|
|
| Metric | Formula |
|
|
|--------|---------|
|
|
| Success Rate | successful_calls / total_calls x 100 |
|
|
| Report Rate | calls_reported_to_security / total_calls x 100 |
|
|
| Avg Call Duration | total_duration / total_calls |
|
|
| Dept Vulnerability | dept_successes / dept_total x 100 |
|
|
|
|
## Legal Considerations
|
|
|
|
| Requirement | Description |
|
|
|-------------|-------------|
|
|
| Written Authorization | Signed Rules of Engagement from client |
|
|
| Recording Consent | Follow state/jurisdiction recording laws |
|
|
| Scope Boundaries | Only call authorized targets |
|
|
| Data Handling | Securely store any obtained credentials, delete after report |
|
|
|
|
## External References
|
|
|
|
- [Social Engineering Framework](https://www.social-engineer.org/framework/)
|
|
- [PTES Pre-engagement Guidelines](http://www.pentest-standard.org/)
|
|
- [Twilio Voice API](https://www.twilio.com/docs/voice)
|