Social engineering toolkit set.
The social engineering toolkit set was created by trusted s.E.C.
It is an open source, python driven, specifically designed tool to perform advanced attacks against
the human element.
It's a standard tool and a penetration testers arsenal.
The attacks built into the tool kit are designed to be targeted and focused attacks against a person
or organization used during a pen test or ethical hacking.
You can download set from trusted sex GitHub and use any platform you want, and it's already embedded
in Caleigh and ready to use.
The tree on the slide shows the attack tapes under the social engineering attacks branch of the main
menu set.
And the green layer shows the methods of website attack vector options.
I mean, there are many more methods in attacked vectors in the toolkit.
Let's see, one of the attack methods of the social engineering toolkit credential harvester attack
in this attack.
First, we should choose a website which has a login sequence that the victims often visit the toolkit
prepares the clone of that website and serves it at the server.
Our trap is ready and starts to collect the inputs of the victim's.
When a victim visits our website, he or she will face exactly the same page that he or she visits often.
The victim enters the credentials and we collect them.
Let's do it together, social engineering toolkit is installed and ready to use in Kawi, it's defined
in the path so you can start the tool kit anywhere using set tool kit command, choose social engineering
attacks, option in the main menu.
That's number one as the attack vector select website attack vectors.
That's number two.
And our attack method is the credentialled harvester number three.
This menu is the list of the fishing website creation methods, let's choose site Kloner number two.
We need to have a Web site where the victims visit and log in, often, I want to find a login page
for the NHS.
Googling for NHS and in keywords.
Email dort, NHS dot net seems good.
Post back IP addresses used for what IP the server will post to.
Now, this is the you are to clone, I use email, NHS dot net.
The version of the toolkit I use is seven point six point one and one, I want to clone a website.
I get a zip importer error and the method does not continue.
What I Google the error message, I found a solution for this problem in Issues section of the GitHub
page on the social engineering toolkit.
Go to slash etsi, slash C toolkit, set dot config file.
In line 95, turned off to on.
And save the file before closing, now, run the SC tool toolkit again, follow the menus again.
One, two, three, two.
And to the IP address of our machine as postbag IP address.
Enter email, dot, nhs dot net as the you are allowed to clone.
The same error message is here again, but now the program continues and asks for starting Apache's
server if it's not running at the moment.
Answer why for yes, and the trap is ready, the sites cloned, patchy service started, and the credential
harvester is listening to the inputs now.
As the victim when we visit the malicious website.
We will see exactly the same page with email, NHS dot net, enter the username and password click sign
in.
Our malicious Web site redirected the victim to the original page email, NHS dot net, it's a good
idea the victim will not be in any doubt about the front turn back to the attacker system, Caleigh,
and you'll see the credentialled information entered by the victim.
You can leave this command window, everything is still running and logging under your Web directory
path.
Maggie Voigt w w w slash HTML.
To make the credential harvester attack more realistic, you can use some tricks, for example, you
can use the domain name of the target company as a subdomain name of your registered domain name.
Suppose that you, the owners of X, Y, Z, dot com domain and the domain name of the target company
is the company dot com.
You can prepare a URL like the company dot, x, y, z, dot com.
Another way to make the attack more realistic is to buy a domain name similar to the domain of the company,
for example, of the target domain is the company dot com.
You can try to buy the company with a double in.
You can also use the euro crazy tool to find out the alternative website names.
If you're an insider, you can try to match the domain name with your IP address to redirect the victims
to your servers using DNS spoofing.