Social engineering tools

In this section, we will cover a couple of tools that are used to perform social engineering attacks:

• The Social-Engineer Toolkit (SET)
• Ghost Phisher

Let's look at both of these in more detail.

Social-Engineer Toolkit

SET is an open source framework that's designed to perform various types of social engineering attacks and comes with the functionality to create custom attacks. Let's use SET to create a fake Facebook page to capture user credentials.

To get started, on Kali Linux, click Applications | Social Engineering Tools | Social-Engineer Toolkit:

1. When SET opens, you'll be presented with a few options. Choose option 1 to access the social engineering attacks within SET:

...