Now let's open set or a social engineering tool kit and see what different option do we have in set
so to access this program.
Go to application and exploitation tool application exploitation tool and you'll find set set.
Actually it's an interactive program.
I mean you don't have to memorize anything.
It give you different options.
You just have to type one or two or three.
So as you can see this is the main screen.
They also have versions that run under Windows but I don't recommend it.
I tested and most of the feature no talking.
So the one built in Intel and it is quite good.
You may face a problem when you start set for the first time and next lecture I'm going to give you
how to fix it but if you if you open set and it work fine you can skip the next lecture but if you face
any problem just watch the next lecture.
It would show you how to fix said if it didn't start from the first time.
Once you start said as you can see this is the main menu we're going to use the first one which is the
show social and doing it but it has some built in features that will be used later on like penetration
testing tool and fast track.
It's an amazing tool that automates the penetration testing.
It will just try to hack the system looking for vulnerability try to exploit them automatically and
you're going to see that on the next section.
Also you can update the toolkit.
And I suggest that you usually start with number four.
So once you start that for the first time just click on for to update.
If there is any update for the tool since a mine is updated so no need to do that but maybe if you do
that yourself it will take sometimes up until you add update to the latest version.
So we're going to start with the first one social engineering attack.
And as you can see you'll find many type of attack.
We're gonna find Sprint is pre phishing attack which is sending different e-mail to different people
with some like malicious BGF or link.
We're going to try and this actually what would be the Web site attack where we can compromise the computers
or the Web sites.
All I need.
All I need to do is to convince someone to open a web site.
And if you open the site I compromises machine.
We have the creating a payload.
We have Android attack.
We have wireless access point attack.
We have azimuth spoofing even it can create a payload like uh this option uh create a payload number
three and
added this payload to USP and then if you give the airspeed to anyone and he plug it in this computer
you'll be compromising system.
So it's an amazing tool.
I mean a section is not enough to explain the full tools.
So I suggest that you go through it and it's a very very powerful tool to test the people security evidence.
So during this section I'm going to go through some of that tech and I'm going to add some material
as a reference if you need to know more about the set but I suggest that you spend some time going through
different feature.
So uh I will start with number two which is a website attack vector and we have different kind of attacks.
We can try some of them but I will struggle with the simplest one.
What I will do it's whenever I'm trying an attack I'm going to try this attack on different platform
and you should do the same.
So because you need to understand the tools that you are using it's capable to work where exactly.
If I use it on Windows 7 it will work on not on Windows 8 to understand when the server.
So you should try whenever you are studying an attack try it on a different platform.
So you know you'll get the knowledge that this tool is capable to doing what and where and knowing the
information about your victim which has been explained in Section 1 and 2.
This makes sense now because according you know now the tool and the capability of the tool and also
you have information about your victim.
So you'll be knowing how to use the right tool in the right place.
So
this is mainly some of the some of the Web site attacks that we gonna try it's related to a Web site.
And next lecture as I mentioned I'm going to show you how to fix it.
There is a problem and the lecture.
After that I'm going to start one by one or most of them.
So let's see the first and easiest attack after fixing set.
If you have any problem with it.