#SOCIAL ENGINEERING TOOLKIT KALI PROFESSIONAL#

Here we entered the linkedin website URL because it is a popular professional networking website that our friends have an account. In our case we choose the local machine itself(192.168.1.25).Įnter the URL of the website to clone. Select Site Cloner by entering ‘2’ in the command promptįor this example we will use the Site Cloner option in order to clone the login page of a very popular website( ) that will have the role of the bait.Įnter the IP address of the system that will host the fake website.

As we can see in the next image SET is giving us 3 options. We will use the Credential Harvester Attack Method to obtain the credentials of the users. Select Credential Harvester attack method Our choice will be the Website Attack Vectors as we need to test how vulnerable are the users against phishing attacks. Select Website Attack vectors from the menu as shown in the terminal. Select Social-Engineering attack from the menu by entering ‘1’ in the prompt. It will open up the application in a command terminal as shown in the image below.Īlso you can start the tool from gnome terminal running the setoolkit Select Social Engineering Tool from the Applications menu in kali linux. We are demonstrating an example of clone phishing with SET(version 7.7.4) along with steps Because this attack is based on a previously seen, legitimate message, it can be effective in duping a target. malicious attachments, invalid URL links, etc.). In this attack, targets are presented with a copy (or “clone”) of a legitimate message they had received earlier, but with specific changes the attacker has made in an attempt to ensnare the target (e.g. Whaling attacks typically take specific responsibilities of these executive roles into consideration, using focused messaging to trick the victim. It targets an organization’s senior or C-level executives.

In this type, a specific individual is targeted, rather than a mass of users, analogous to a spear that can be used to attack only one person at any given point of time. There are three major types of phishing attacks Spear phishing, whaling and Clone phishing. Phishing is a way of attempting to acquire information such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in an electronic communication. To begin with this social engineering toolkit tutorial takes an in-depth look at the phishing attack vectors. The SET was created and written by the founder of TrustedSec. Its main purpose is to augment and simulate social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed. The Social-Engineering Toolkit (SET) is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing.

#SOCIAL ENGINEERING TOOLKIT KALI PROFESSIONAL#

Social engineering toolkit kali