Using SET for client-side exploitation

SET is a tool that was designed to create social engineering-based attack vectors. SET can create custom attacks very rapidly. You can create malicious payloads, QRcode-based attacks, and Powershell attacks just to name a few. You can even start up a browser locally on the box, create malicious code, and use Metasploit to deliver. I will be setting up a fake site and harvesting users credentials while they think they are logging in. I am going to show you how easy it is to use and why it's my favorite tool for testing users:

1. The first thing we are going to do is start SET:

2. From the main menu, there are many options available to use. Since I want to create Social-Engineering Attacks, I will select option 1. Definitely explore other options in this powerful tool:

3. From here, I will select option 2. I am using this option because...