We will not execute a phishing attack using the same set talk.
So open the terminal and run the set tool set toolkit.
Then choose social engineering attacks and then mass mailer attack option number five.
What do you want to do we want to attack mass mails not just one single e-mail or select option on the
tool.
It will ask you for the path of the file that has the list of e-mails for this purpose of created this
email list.
Find here random emails so I will provide the path
note which will ask you about your Gmail account or an open email relay.
So I will use my Gmail account for this purpose but you can provide any open relay for this purpose
as well.
This is my email account.
Don't worry I don't use it.
It's not my primary email account or personal e-mail account and the name that will appear is email
password.
That's the password.
Don't fly for a higher priority.
You want to attach a file.
I will not attach a file because usually file attachment like malicious file attachments are blocked
and the email control level whatever it's a firewall.
It's email who thinks a summit Saturday.
Usually these attacks don't work.
If you have an attachment within the email so it's better to provide a link that has the attachment.
Once you click on the link you'll be able to download attachment.
So I will not at all but in my email subject salaries for example send that email.
I'll send it and be blamed for him not HMO.
And now it will ask me about the buddy and the buddy.
I will put a link to a malicious file which I will be hosting on my machine here for this purpose.
I will open another terminal and I will run the set tool kit again.
I will select social engineering but this time I will create a payload and a listed option on before
so I will grade this payload generated posted on my web server and put the link in the email.
This I will do option number two here.
Create a reverse DCP interpreter.
The host will be the local IP of my computer here.
The listener just genetic number 444.
For now it's generating the payload on my machine.
It will take some time generating payload so the payload has been moved generated under this path.
Okay so I'll copy this bath and it's asking me for it to start a.
Yes.
Let's start a listener.
It will initiate US Floyd's console session and listener will be invoked.
Meanwhile I will open a new terminal and copy the file the XY here to the Web it would directory so
I will copy the fun from the path to var w w w h then.
So now the file is here.
Its payload dot e XY and how can I reach it.
It's the IP such payload that XY.
Again I can go to a bitterly with the dot com and puts my IP here
and I ask us to shorten it.
So.
Copy that.
Go again here to the first instance and put this in the buddy press enter and then E and D two end.
Now the application will attempt to send the e mails to all the list that we have in this text file.
I go to the victim machine here and check this email I'm using temp mail dot org.
I have got a new email.
I'll press on it.
And this is the link of the.
This is a crafted link actually of the malicious file posted on my server.
I press on it.
I'll save the file save as whatever its rename name it put it on the desktop or you can just even run
it 32 from here.
So let's run it.
If I go here again to my method prayer session it will tell me that and mentor present session has been
opened and now I have full access to the remote computer.