SET is a tool that was designed to create social engineering-based attack vectors. SET can create custom attacks very rapidly. You can create malicious payloads, QRcode-based attacks, and Powershell attacks just to name a few. You can even start up a browser locally on the box, create malicious code, and use Metasploit to deliver. I will be setting up a fake site and harvesting users credentials while they think they are logging in. I am going to show you how easy it is to use and why it's my favorite tool for testing users:
- The first thing we are going to do is start SET:
- From the main menu, there ...
