[slober]

SET Social Engineering Toolkit Tutorial

1. Introduction
   
2. Requirement
   
3. Explanation [SET]
   
4. Useful links
   
5. Outro
   
6. Sources
   

1. Introduction
first the definition of social engineering From wikipedia.org

Social engineering is commonly understood to mean the art of manipulating people into performing actions or divulging confidential information.
While it is similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access; in most cases the attacker never comes face-to-face with the victims.

"Social engineering" as an act of psychological manipulation was popularized by hacker-turned-consultant Kevin Mitnick. The term had previously been associated with the social sciences, but its usage has caught on among computer professionals.

ok and SET??? 😧

set is an tool that can help you performing an SE attack
i will explain ho you can fake a web page like Facebook, gmail,...
if you combine SET with a wifi-hack or with an DNS-spoof or..

ok let's go on to the next part 😉

2. Requirement

• Some SE knowledge
  
• Backtrack5 or ....
  
• ettercap
  
• SET
  
• Virtualbox (if you’re on a windiws machine)
  

3. Explanation

ok SET is really easy to use so let's start.

start backtrack and go to SET
Applications -> Backtrack -> Exploitation tools ->
Social engineering Tools -> SET

[IMG]http://img651.imageshack.us/img651/8066/18540368.png[/IMG]

then press 2 or chose a different attack 2 is for websites =)

[IMG]http://img198.imageshack.us/img198/9053/46201498.png[/IMG]

we are almost done now you can chose a more detailed attack do you want a backdoor or just a fake gmail, facebook,.... site? i pressed 3 =)

[IMG]http://img845.imageshack.us/img845/9092/49319321.png[/IMG]

now you can chose to copy a login (paypal, game,....) or you can use the themes pre-difined by SET
i taked 1 and the theme of gmail

[IMG]http://img28.imageshack.us/img28/4429/27009126.png[/IMG]

[IMG]http://img534.imageshack.us/img534/3230/82708879.png[/IMG]

now it's done 👍 you can dns-spoof your target or use some other attack the lure him
when the pass is entered you can view it trough set

[IMG]http://img585.imageshack.us/img585/1408/98994285.png[/IMG]

[IMG]http://img39.imageshack.us/img39/6619/75474149.png[/IMG]

[IMG]http://img24.imageshack.us/img24/5704/65135144.png[/IMG]

Notice.

You learn more by trying yourself

4. Useful Links

• http://www.youtube.com/watch?v=---X87jRK7o [Video]
  
• http://en.wikipedia.org/wiki/Social_engi...(security)
  
• http://www.backtrack-linux.org/
  
• http://shadeshroud.be [my site with some other tutorial]
  
• https://hackforums.net/showthread.php?tid=1402415 [DNS spoofing]
  

5. Outro

ok this was my tutorial i hate outro's XD
please comment =)

ow if i missed something spelled something wrong just say i'm quite new to English tutorials ;)

6. Sources

• http://www.social-engineer.org/
  
• http://en.wikipedia.org/wiki/Social_engi...(security)
  

[I'm out!]

Interesting tutorial you have here.

Reading is a pleasure ;)

[l33t10n9]

NIce tut here, great and HQ post
3535355353535

[slober]

Thx,
trying to make a series of this next is set and metasploit =)

[bernardbear]

thanks for sharing bro,but may you help me pivoting internet caffe client pc ?
i already backdoored 1 pc :D but armitage + metasploit still cant exploit it. OS is sp2 ! lol
if yes may you pm me with your msn or ym ?

[BeggFoMercy]

Great TUT it seems awesome ill try it
just when i kno what is back track :D

[slober]

Great TUT it seems awesome ill try it
just when i kno what is back track :D

backtrack is an "hacking os" you can download it from there oficial website if you need an tutorial on how to install it i will soon post one here =) just keep watching for a few days ;)

thanks for sharing bro,but may you help me pivoting internet caffe client pc ?
i already backdoored 1 pc :D but armitage + metasploit still cant exploit it. OS is sp2 ! lol
if yes may you pm me with your msn or ym ?

use an dns spoofing attack and a java drive by =) or the java applet in SET 100% working =) [not elegant but working =)]

you can ad me just sent me pm (don't give it here or i get spammed lol)

[BeggFoMercy]

backtrack is an "hacking os" you can download it from there oficial website if you need an tutorial on how to install it i will soon post one here =) just keep watching for a few days ;)

use an dns spoofing attack and a java drive by =) or the java applet in SET 100% working =) [not elegant but working =)]

you can ad me just sent me pm (don't give it here or i get spammed lol)

Well alright ill be waiting for that so do i have to burn it on a CD etc? and setup like a new OS ?
and i need a list of commands that will help me doing things with that OS

[bernardbear]

thanks for pm guys,i will be waiting for you online ?

[Fr0st_Byte]

This is a lot like my tutorial I wrote last year. The one in my sig.
Good job.

[haris013]

hi guys!I wanted to ask if someone can help me to build a phishing site for fun :P
i need more details and tips,if someone can help me plz pm me.i have already read this tut and i have some previous experiences with backtrack but i am still a noob :D

[slober]

hi guys!I wanted to ask if someone can help me to build a phishing site for fun :P
i need more details and tips,if someone can help me plz pm me.i have already read this tut and i have some previous experiences with backtrack but i am still a noob :D

making a phishing site is not that hard i maked a tutorial on howto do it on my website: http://shadeshroud.be/moderate-tutorials-phishing/
the problem with SET and backtrack is that the tools are primary used for local purposes so i suggest you take a look to this =)

[wellager]

Good job & thanks for your hard work.

[haris013]

making a phishing site is not that hard i maked a tutorial on howto do it on my website: http://shadeshroud.be/moderate-tutorials-phishing/
the problem with SET and backtrack is that the tools are primary used for local purposes so i suggest you take a look to this =)

thx :D
so if backtrack and set are for local area network can i do something to a public hotspot or a cracked wirless network?

[slober]

thx :D
so if backtrack and set are for local area network can i do something to a public hotspot or a cracked wirless network?

yes if you are on some free wifi then you can dns-spoof all of the persons on it and if they surf to facebook, gmail, paypal yahoo,.... you can hack (phish,hack based on your settingswith set) them with set