Kali Linux 2018: Windows Penetration Testing - Second Edition

Using the Spear-Phishing Attack Vectors menu

The Spear-Phishing Attack Vectors menu has four options:

1. 1) Perform a Mass Email Attack
2. 2) Create a FileFormat Payload
3. 3) Create a Social-Engineering Template
4. 99) Return to Main Menu

Since we are going to set up a persistent threat that lets us stay in command of the victim's machine, and have to overcome a user's possible reluctance to double-click an attachment, we have to create an irresistible spear-phishing mail piece. To do this properly, it is important to have done effective reconnaissance ahead of time.

Company address books and calendars are useful for creating the urgency needed to get an email opened. Just like with marketing by email, either legitimate or spammy, a spear-phishing ...