Embedded Files
Delivery - Phishing
Social-Engineer Toolkit (SET) is integral to penetration testing as it evaluates how susceptible the target(s) are to a wide variety of phishing attacks by enabling the user to deploy multiple types of campaigns.Â
Below I demonstrate the deployment of a fake google login page.
Since I'm using SET's default template, setup will be simple and starts with navagating the SET menu.
Since I'm doing this in my homelab I just use my Virtual Machine's local IP address.
After using ifconfig I can type it directly into the text field.
After choosing the Google Template, the website is live and ready to be used. Now its up to the penetration tester to direct people to the site.
*Some assets don't load because the homelab isn't connected to the internet.
Page updated
Google Sites
Report abuse