‫Social engineering toolkit is set.
‫The social engineering toolkit set was created by trusted assessee.
‫It is an open source, python driven, specifically designed tool to perform advanced attacks against
‫the human element.
‫It's a standard tool in a penetration testers arsenal.
‫The attacks built into the tool kit are designed to be targeted and focused attacks against a person
‫or organisation used during a pen test or ethical hacking.
‫You can download set from trusted sex, GitHub and use any platform you want.
‫And it's already embedded in Cali and ready to use.
‫The tree on the slide shows the attack types under the social engineering attacks branch of the main
‫menu set.
‫And the green layer shows the methods of website attack vector options.
‫I mean, there are many more methods in attack vectors in the toolkit.
‫Let's see one of the attack methods of the social engineering toolkit credential harvester attack in
‫this attack.
‫First, we should choose a Web site which has a log in sequence that the victims often visit.
‫The toolkit prepares the clone of that web site and serves it at the server.
‫Our trap is ready and starts to collect the inputs of the victims.
‫When a victim visits our website, he or she will face exactly the same page that he or she visits often.
‫The victim enters the credentials and we collect them.
‫Let's do it together.
‫Social engineering toolkit is installed and ready to use in Cali.
‫It's defined in the paths.
‫You can start the toolkit anywhere using Set Tool Kit Command.
‫Choose social engineering attacks option in the main menu that's number one as the attack vector.
‫Select website attack vectors.
‫That's number two, and our attack method is the credentialed harvester.
‫Number three.
‫This menu is the list of the fishing website creation methods.
‫Let's choose Site Cloner number two.
‫We need to have a website where the victims visit and log in often.
‫I want to find a login page for the NHS.
‫Googling for NHS and log in keywords.
‫Email Dot NHS Dot Net seems good.
‫Post back IP address is used for what IP the server will post to.
‫Now, this is the URL to clone.
‫I use email dot, NHS Dot Net.
‫The version of the toolkit I use is seven point six point one.
‫And when I want to clone a website, I get a zip importer error and the method does not continue.
‫When I Google the error message, I found a solution for this problem in the issues section of the GitHub
‫page on the social engineering toolkit.
‫Go to slash Etsy slash C toolkit slash set dot config file.
‫In line 95, turn off to on.
‫And save the file before closing.
‫Now run the SC toolkit again, follow the menus again one two three two.
‫Enter the IP address of our calling machine as Postbank IP address.
‫Enter email dot NHS dot net as the URL to clone.
‫The same error message is here again.
‫But now the program continues and asks for starting Apache server if it's not running at the moment.
‫Answer why for yes, and the trap is ready.
‫The site's cloned Apache server has started and the credential harvester is listening to the inputs.
‫Now.
‫As the victim when we visit the malicious website.
‫We will see exactly the same page with emailed NHS staff, then enter the username and password, click
‫sign in.
‫Our malicious website redirected the victim to the original page, emailed NHS Dot Net.
‫It's a good idea.
‫The victim will not be in any doubt about the fraud.
‫Turn back to the attacker system Cally, and you'll see the credentialed information entered by the
‫victim.
‫You can leave this command window.
‫Everything is still running and logging under your web directory path.
‫Slash Vargas, WW W Slash HD and now.
‫To make the credential harvester attack more realistic, you can use some tricks, for example, you
‫can use the domain name of the target company as a sub domain name of your registered domain name.
‫Suppose that you're the owners of X Y Z dot com domain, and the domain name of the target company is
‫the company icon.
‫You can prepare a URL like the company Dot X Y Z icon.
‫Another way to make the attack more realistic is to buy a domain name similar to the domain of the company.
‫For example, of the target domain is the company icon.
‫You can try to buy the company with a double in.
‫You can also use the URL crazy tool to find out the alternative Web site names.
‫If you're an insider, you can try to match the domain name with your IP address to redirect the victims
‫to your servers using DNS spoofing.