Social engineering is an art of exploiting human brains to lure important information about a target in the form of account numbers, credit card details, user credentials, and so on. Social engineering originally developed from falsifying calls, which were intended to lure information from the victim and where the attacker pretended to be someone known, someone from the higher authority, and so on.
Social engineering has gained a lot of hike in recent years and has enhanced its scope, covering advanced client-side social engineering attacks in context of the Web. Throughout this chapter, we will see how we can carry out these attacks using the social engineering toolkit, which also serves as a fast-paced exploitation environment for Metasploit, especially while conducting client-based exploitation.
In this chapter, we will cover the following aspects while using the social engineering toolkit:
Creating quick client-side exploit generation and setting...