Social engineering tools
As you may have already surmised, there are a number of different social engineering tricks. However, this all boils down to a couple of core vectors for the exploit, that is, physical, email, websites, and phone. This means the attacker tools will have to work within these confines. We have discussed physical and electronic social engineering. Now, let’s turn our attention to the tools used by attackers and pentesters.
Social-Engineer Toolkit
Created by Dave Kennedy, the Social-Engineer Toolkit (SET), according to their GitHub entry, is “an open-source Python-driven tool aimed at penetration testing around Social-Engineering.” It was originally designed as a penetration testing tool; many attackers use it in their campaigns. SET is incorporated in the Kali Linux distribution. It can also be downloaded from https://github.com/trustedsec/social-engineer-toolkit. It offers the following types of attacks:
- Spear phishing attack...
