Scribd Logo
Upload

Welcome to Scribd!

  • 41 views

    What Are Social Engineering Attacks?: Phishing IVR or Phone Phishing Baiting Spear Phishing

    Uploaded by

    Suraj Verma
    This document provides instructions on how to use the Social Engineering Toolkit (SET) to conduct a phishing attack to steal Facebook login credentials. It involves using SET to import a saved Facebook login page as a template, configure the attack with the attacker's IP and path to the template, then deploying the phishing page to trick a target into entering their credentials. When the target accesses the fake page, their login details are harvested and displayed in SET for the attacker to view. The instructions guide carrying out the entire process through 7 steps to demonstrate a credential harvesting attack using social engineering.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    What Are Social Engineering Attacks?: Phishing IVR or Phone Phishing Baiting Spear Phishing

    Uploaded by

    Suraj Verma
    41 views7 pages
    This document provides instructions on how to use the Social Engineering Toolkit (SET) to conduct a phishing attack to steal Facebook login credentials. It involves using SET to import a saved Facebook login page as a template, configure the attack with the attacker's IP and path to the template, then deploying the phishing page to trick a target into entering their credentials. When the target accesses the fake page, their login details are harvested and displayed in SET for the attacker to view. The instructions guide carrying out the entire process through 7 steps to demonstrate a credential harvesting attack using social engineering.

    Original Description:

    web attack

    Original Title

    socail

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides instructions on how to use the Social Engineering Toolkit (SET) to conduct a phishing attack to steal Facebook login credentials. It involves using SET to import a saved Facebook login page as a template, configure the attack with the attacker's IP and path to the template, then deploying the phishing page to trick a target into entering their credentials. When the target accesses the fake page, their login details are harvested and displayed in SET for the attacker to view. The instructions guide carrying out the entire process through 7 steps to demonstrate a credential harvesting attack using social engineering.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    41 views7 pages

    What Are Social Engineering Attacks?: Phishing IVR or Phone Phishing Baiting Spear Phishing

    Uploaded by

    Suraj Verma
    This document provides instructions on how to use the Social Engineering Toolkit (SET) to conduct a phishing attack to steal Facebook login credentials. It involves using SET to import a saved Facebook login page as a template, configure the attack with the attacker's IP and path to the template, then deploying the phishing page to trick a target into entering their credentials. When the target accesses the fake page, their login details are harvested and displayed in SET for the attacker to view. The instructions guide carrying out the entire process through 7 steps to demonstrate a credential harvesting attack using social engineering.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    of 7

    What are Social Engineering Attacks?

    Social Engineering attacks are the various cons used by the hackers to trick people into providing
    sensitive data to the attackers. There are various type of social engineering attacks, some of the
    popular attacks are

     Phishing
     IVR or phone phishing
     Baiting
     Spear phishing

    Hack Facebook Using SEToolkit


    In this tutorial, I will show you how to steal Facebook’s login credentials using Social
    Engineering Toolkit(SET). SET is an open-source Python-driven tool aimed at penetration
    testing around Social-Engineering. It is developed by the David Kennedy, the founder of
    TrustSec.

    Step 1:

    For this tutorial, we will use our Virtual Hacking Lab we created in the last tutorial.We will use
    Kali Linux as our main operating system and Window 7 as our target machine. SET comes pre-
    installed in Kali Linux. To run SET, open the terminal in Kali Linux and type the command
    below.

    Step 2:

    Once SET is loaded it will show few options as shown in the image below. Select “Social-
    Engineering Attacks” by entering “1” and hit enter.
    Now it will show you another set of options, select “Website Attack Vectors” by entering “2” and hit
    enter.
    Step 3:

    Then it will show you three options as shown below, the first option will be “Web Templates” it
    gives five pre-defined websites that you use for phishing. The second option is “Site Cloner”
    using this option you can clone login page of any website and the third option which we will be
    using for this tutorial is “Custom Import” using this you can use your own login page template.
    Select option “3) Custom Import” and press enter.

    Step 4:

    In this step, it will ask for your IP address, if you are running the attack on LAN you can provide
    your internal IP address and if you are executing the attack on WAN then you have to provide
    your external IP address. In this tutorial, we will be executing the attack on LAN, to check you
    internal IP address run “ifconfig“. Enter your IP address and hit enter.
    Step 5:

    Go to www.facebook.com, save the login page by clicking right click and selecting the “Save as”
    option. A new window will pop up rename the file name to “index” and select “Webpage,
    HTML Only” in the drop-down menu below.

    Step 6:

    Enter the path where you stored index.html file make sure to add “/” at the end of the path. Now
    it will show you two options, select “copy the entire folder” and hit enter. Now enter the website
    you are trying to hack. Follow these steps as shown in the image below.
    Well done! you have successfully configured the Social Engineering Toolkit’s Credential Harvester
    Attack. Now your screen should look similar to the image shown below.

    Step 7:

    In this step, I will show you how the attack work by opening the phishing link on the target
    machine and filling by fake login credentials in our phishing facebook website. I will go to our
    target machine, open internet explorer and enter your IP address(10.0.0.10) and fill the login
    details.

    Now I will go back to Kali Linux and check if we have successfully harvested the login details.
    We have successfully stolen the Facebook login credentials from the target machine.

    You might also like