The Social Engineering Toolkit (SET)
SET was created and written by David Kennedy (@ReL1K
), founder of trustedsec, and it is maintained by an active group of collaborators (www.social-engineer.org
). It is an open-source Python-driven framework that is specifically designed to facilitate social engineering attacks.
The tool was designed with the objective of achieving security by training. A significant advantage of SET is its interconnectivity with the Metasploit framework, which provides the payloads needed for exploitation, the encryption to bypass antivirus software, and the listener module, which connects to the compromised system when it sends a shell back to the attacker.
To open SET in a Kali distribution, go to Applications | Social Engineering Tools | social engineering toolkit
, or enter sudo setoolkit
at a shell prompt. You will be presented with the main menu, as shown in Figure 5.13:
Figure 5.13: Startup screen on SET
If you select 1) Social-Engineering...