User Tools

Site Tools


social_engineering_toolkit

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
social_engineering_toolkit [2019/09/28 13:35]
acm
social_engineering_toolkit [2019/09/28 18:37] (current)
acm
Line 7: Line 7:
  
 === Credential Harvesting === === Credential Harvesting ===
-This type of attack works by cloning the login page of a site and tricking the target into entering their login information into the site. The information is then sent back to you and the target is logged into the actual site. +This type of attack works by cloning the login page of a site and tricking the target into entering their login information into the site. The information is then sent back to you and the target is logged into the actual site. The site cloning works the same as it does with the java applet attack. 
 + 
 +=== Metasploit Browser === 
 +The Metasploit browser attack works much the same way as the last two, tricking the target into visiting what they believe to be a legitimate website, but is actually a website that will attempt to run various exploits from the Metasploit tool against the target's browser. This attack is useful when you suspect that your target may be using an outdated version of their web browser that may be vulnerable to common web exploits. This attack can be detected by anti-virus as it is attempting to run malware against the target. 
 + 
 +=== References === 
 +  *https://www.trustedsec.com/social-engineer-toolkit-set/ 
 +  *https://www.kalitutorials.net/2014/05/social-engineering-toolkit-kali.html 
 +  *https://www.binarytides.com/hack-windows-social-engineering-toolkit-java-applet/
social_engineering_toolkit.1569695714.txt.gz · Last modified: 2019/09/28 13:35 by acm