In the previous videos, we have seen how to use different tools and techniques in order to gain access
to our target computer system, but in this lesson we will see how to hack humans.
OK.
And yes, I'm talking about social engineering techniques.
So hacking a human mind is easier than hacking a computer system.
Right.
So there are some experts out there who claims that playing with human emotions in order to trick them
to do what we want them to do is much easier than hacking into his computer system.
Right.
So we will see that different methods of social engineering.
So let's move to applications and go to social engineering tools and select social engineering toolkit
right now, which says, do you agree to terms of service?
Yes, we agree.
So we will going to create a fake email and we'll also see how to create some phishing mills or fake
websites, etc., right.
So the social engineering toolkit is a very famous method of doing this.
So I will select the first option, which is social engineering attacks.
Right.
So there are various aspects out there, but we will see the first one for now.
OK.
Now it's learning, so we have to.
OK, so here are some other options, but we will use the fifth one, which is Mazmanian attack.
OK, so in this video, we're going to use fake emails, right?
So select five.
Now there are two options.
First one is imminent attack for an individual.
If you are targeting an individual person, then select the first one.
And if you are targeting multiple, then use the second one.
So for now, I will go with the first option announces send e-mail to.
So enter the e-mail address of your target.
So let's say target zero zero one.
OK, and direct Gmail dot com.
OK, now I don't know whether this email already exists or not.
I'm just showing you for the purpose of demonstration.
So and mouses use a Gmail account for your email attack.
OK, that is from which account you want to send this email.
Right.
Or if you have your own server then you can use it as well.
So I will go with the first option.
Now it says your e-mail address.
See you guys.
I'm not going to enter my real email address here because in the next step it asked me for the real
password.
OK, so let me give a fake email again.
So Hacker at the rate, let's say.
OK, let's do one thing and let's play.
Customer care team and the red Facebook, or should I say?
Gmail dot com.
OK, so we pretend that we are from customer care team of Gmail.
OK, now it says take the name from which you want to send email and your target will able to see it.
OK, so let's give it a name.
Support did not ask for email password.
So if anything, now it says, do you want to flag this message as high priority?
Yes, we want and we want to identify and see if you can attach a malicious file here.
OK, but for now, iSelect.
No.
Again, no, not ask for e-mail subject, so let's see, armed security alert.
Send the message, it's our bling bling out, says, enter the body of the message and type and capitalise
when finished.
OK, so let's type your main message here.
So let's suppose a.
Hello.
In the name of your target.
We found that.
Someone is trying to access from.
Access to your Gmail account, kindly reset your password.
The details are attached.
But this may be OK, something like that, and I your many issues right there.
So we're actually trying to trick our target to click on that malicious file.
Right.
That many just find could be anything, let's say your undetectable back door order.
OK, so next round of body, nothing.
Just tape and in capital letters.
Right now, let me stop this process, OK?
OK, because after pressing enter, this system will try to send an email to that e-mail.
OK, it actually tries to send a real email there.
OK, so I have disconnected my computer system from Internet connection because I don't want to send
an email because there is no Emeline exist.
Right.
So this is how we can use social engineering toolkits in order to create an fake email.