Social Engineering Toolkit - Revision history

MDag: /* Summary */

2021-07-11T02:50:42Z

Summary

← Older revision		Revision as of 02:50, 11 July 2021
Line 1:		Line 1:
	== Summary ==		== Summary ==

	'''Social Engineering Toolkit (SET)''' is a free and open-source Toolkit. It is used for Social Engineering attacks, e.g.phishing. This menu driven Toolkit allows you with several submenus to control your attacks tailored to the desired target.		'''Social Engineering Toolkit (SET)''' is a free and open-source Toolkit. It is used for Social Engineering attacks, e.g.phishing. This menu driven Toolkit allows you with several submenus to control your attacks tailored to the desired target. It is pre-installed in Kali Linux.


	Run Social Engineering Toolkit with "'''setoolkit'''" and go through our example to get a first overview of this Toolkit.		Run Social Engineering Toolkit with "'''setoolkit'''" and go through our example to get a first overview of this Toolkit.

2021-07-11T02:49:33Z

Summary

← Older revision		Revision as of 02:49, 11 July 2021
Line 1:		Line 1:
	== Summary ==		== Summary ==

	'''Social Engineering Toolkit (SET)''' is a menu driven ~~system that~~ allows you to control your attacks tailored to the desired target.		'''Social Engineering Toolkit (SET)''' is a free and open-source Toolkit. It is used for Social Engineering attacks, e.g.phishing. This menu driven Toolkit allows you with several submenus to control your attacks tailored to the desired target.

			Run Social Engineering Toolkit with "'''setoolkit'''" and go through our example to get a first overview of this Toolkit.

	== Requirements ==		== Requirements ==

2021-07-11T01:21:37Z

5th Enter the IP address for the POST back in Harvester/Tabnabbing and select finally Twitter

← Older revision		Revision as of 01:21, 11 July 2021
Line 72:		Line 72:
	[[File:signin2.jpg\|150px\|thumb\|Example\|left\|Twitter Phishing]]		[[File:signin2.jpg\|150px\|thumb\|Example\|left\|Twitter Phishing]]

	=== 5th Enter the IP address for the POST back in Harvester/Tabnabbing and select finally Twitter ===		=== 5th Enter the IP address for the POST back in Harvester/Tabnabbing and select finally Twitter Template ===

	For practicing purposes I used the localhost (127.0.0.1), of course in a real attack you would use a corresponding ip address. And then you've to select the Twitter Template (option 3).		For practicing purposes I used the localhost (127.0.0.1), of course in a real attack you would use a corresponding ip address. And then you've to select the Twitter Template (option 3).

2021-07-11T01:17:27Z

4th select "Web Templates"

← Older revision		Revision as of 01:17, 11 July 2021
Line 65:		Line 65:

	To allow Social Engineering Toolkit to import a list of pre-defined web applications that it can utilize within the attack we've to select option 1		To allow Social Engineering Toolkit to import a list of pre-defined web applications that it can utilize within the attack we've to select option 1

2021-07-11T01:11:43Z

Requirements

← Older revision		Revision as of 01:11, 11 July 2021
Line 6:		Line 6:

	As part of this guide, I used Kali (Kali GNU/Linux Rolling 5.10.0-kali3-amd64) as the OS, so it was already preinstalled. I installed Kali on a Virtual machine (VMware® Workstation 15 Pro 15.5.5 build-16285975).		As part of this guide, I used Kali (Kali GNU/Linux Rolling 5.10.0-kali3-amd64) as the OS, so it was already preinstalled. I installed Kali on a Virtual machine (VMware® Workstation 15 Pro 15.5.5 build-16285975).

	* '''Social Engineering Toolkit Version:''' 8.0.3

	== Example ==		== Example ==

2021-07-11T01:11:16Z

Requirements

← Older revision		Revision as of 01:11, 11 July 2021
Line 7:		Line 7:
	As part of this guide, I used Kali (Kali GNU/Linux Rolling 5.10.0-kali3-amd64) as the OS, so it was already preinstalled. I installed Kali on a Virtual machine (VMware® Workstation 15 Pro 15.5.5 build-16285975).		As part of this guide, I used Kali (Kali GNU/Linux Rolling 5.10.0-kali3-amd64) as the OS, so it was already preinstalled. I installed Kali on a Virtual machine (VMware® Workstation 15 Pro 15.5.5 build-16285975).

	* Social Engineering Toolkit '''~~Version~~ 8.0.3~~'''~~		* '''Social Engineering Toolkit Version:''' 8.0.3

	== Example ==		== Example ==

2021-07-11T01:10:34Z

Requirements

← Older revision		Revision as of 01:10, 11 July 2021
Line 6:		Line 6:

	As part of this guide, I used Kali (Kali GNU/Linux Rolling 5.10.0-kali3-amd64) as the OS, so it was already preinstalled. I installed Kali on a Virtual machine (VMware® Workstation 15 Pro 15.5.5 build-16285975).		As part of this guide, I used Kali (Kali GNU/Linux Rolling 5.10.0-kali3-amd64) as the OS, so it was already preinstalled. I installed Kali on a Virtual machine (VMware® Workstation 15 Pro 15.5.5 build-16285975).

			* Social Engineering Toolkit '''Version 8.0.3'''

	== Example ==		== Example ==

2021-07-11T01:07:56Z

Result: Credentials entered from victim are visible for Attacker

← Older revision		Revision as of 01:07, 11 July 2021
Line 83:		Line 83:
	=== Result: Credentials entered from victim are visible for Attacker ===		=== Result: Credentials entered from victim are visible for Attacker ===

	Victims ~~ser~~ credentials are visible. At the same time the victims browser is redirected to the original Twitter Sign in website.		Victims user credentials are visible. At the same time the victims browser is redirected to the original Twitter Sign in website.

2021-07-11T01:03:27Z

Result: From victim entered credentials are visible for Attacker

← Older revision		Revision as of 01:03, 11 July 2021
Line 81:		Line 81:
	[[File:signin3.jpg\|150px\|thumb\|Example\|left\|result]]		[[File:signin3.jpg\|150px\|thumb\|Example\|left\|result]]

	=== Result: ~~From~~ victim ~~entered credentials~~ are visible for Attacker ===		=== Result: Credentials entered from victim are visible for Attacker ===

	~~After executing~~ the ~~"'''Google Phishing'''" module,~~ the ~~victim~~ is ~~asked~~ to ~~"'''~~Sign in~~'''". Victims entered credentials are visible under "'''Logs'''"~~.		Victims ser credentials are visible. At the same time the victims browser is redirected to the original Twitter Sign in website.

2021-07-11T00:44:11Z

5th Enter the IP address for the POST back in Harvester/Tabnabbing and select finally Twitter

← Older revision		Revision as of 00:44, 11 July 2021
Line 72:		Line 72:
	=== 5th Enter the IP address for the POST back in Harvester/Tabnabbing and select finally Twitter ===		=== 5th Enter the IP address for the POST back in Harvester/Tabnabbing and select finally Twitter ===

	For practicing purposes I used the localhost, of course in a real attack you would use a corresponding ip address. ~~Finally~~ you've to select the Twitter Template (option 3).		For practicing purposes I used the localhost (127.0.0.1), of course in a real attack you would use a corresponding ip address. And then you've to select the Twitter Template (option 3).
			After the Template is selected, the choosen website is being cloned. With the next action a website will appear which is similar to the Twitter Sign in website, the victim is prompt to Sign in.