Book Image

Kali Linux Social Engineering

By : Rahul Singh Patel
Book Image

Kali Linux Social Engineering

By: Rahul Singh Patel

Overview of this book

<p>Kali Linux has a specific toolkit that incorporates numerous social-engineering attacks all into one simplified interface. The main purpose of SET (social engineering toolkit) is to automate and improve on many of the social engineering attacks currently out there.</p> <p>This book is based on current advanced social engineering attacks using SET that help you learn how security can be breached and thus avoid it. You will attain a very unique ability to perform a security audit based on social engineering attacks.</p> <p>Starting with ways of performing the social engineering attacks using Kali, this book covers a detailed description on various website attack vectors and client side attacks that can be performed through SET. This book contains some of the most advanced techniques that are currently being utilized by hackers to get inside secured networks. This book covers phishing (credential harvester attack), web jacking attack method, spear phishing attack vector, Metasploit browser exploit method, Mass mailer attack and more.</p> <p>By the end of this book you will be able to test the security of any organization based on social engineering attacks.</p>
Table of Contents (11 chapters)

Phishing and e-mail hacking – Credential Harvester attack


We are going to discuss two attacking methods that appear under Social-Engineering Attack in SET:

  • Web Jacking Attack

  • Spear-Phishing Attack Vector

Updating your Social-Engineering Toolkit

Before performing any attack, it is suggested that you update your Social-Engineering Toolkit. Offensive Security has set up a Kali bleeding edge repository which contains daily builds for several useful and frequently updated tools. The link to the repository is http://www.kali.org/kali-monday/bleeding-edge-kali-repositories/.

In the Our Solution section of this web page, the command to add the is mentioned. This command needs to be run on one of the Kali Linux shells:

echo deb http://repo.kali.org/kali kali-bleeding-edge main >> /etc/apt/sources.list
apt-get update
apt-get upgrade

Once the preceding procedure is performed, SET, along with other social engineering attack tools, will be updated automatically.

Now let's dive into further details...