Practical 9

Introduction:

The Social-Engineer Toolkit (SEToolkit) is an open-source framework designed for penetration testing and social engineering attacks. Developed by TrustedSec, SET is widely used by ethical hackers and penetration testers to identify and understand vulnerabilities in human behavior and organizational security.

What is a Credential Harvester Attack?

A Credential Harvester Attack is a form of phishing where the attacker:

Clones a legitimate website (like Twitter, Facebook, Gmail).
Hosts the fake site locally or publicly.
Waits for the victim to unknowingly submit credentials.
Captures those credentials and displays them to the attacker.

What is SEToolkit?

The SEToolkit provides multiple attack vectors for ethical testing:

Feature	Description
Spear-Phishing	Send targeted phishing emails.
Website Attack Vectors	Clone popular sites to harvest login details.
Credential Harvester	Fake login page to collect credentials.
Web Jacking	Redirect users to malicious lookalike sites.
Payload Generator	Create and deliver backdoors or malware.
Multi-Attack	Combine different social engineering techniques.

Installation of SEToolkit on Kali Linux

Step 1: Clone SEToolkit from GitHub:

git clone https://github.com/trustedsec/social-engineer-toolkit setoolkit/
Step 2: Navigate into the directory:

cd setoolkit
Step 3: Install required dependencies:

pip3 install -r requirements.txt
Step 4: Install SEToolkit:

python setup.py
Step 5: Run the SEToolkit:

setoolkit

Steps to Perform Credential Harvester Attack using SEToolkit

Open terminal and run setoolkit.
Select option 1 → Social-Engineering Attacks.
Select option 2 → Website Attack Vectors.
Select option 3 → Credential Harvester Attack Method.
Select option 1 → Web Templates.
Enter your IP address (e.g., 192.168.0.101).
Choose template site to clone (e.g., option 3 → Twitter).
SET will generate a phishing link (e.g., http://192.168.0.101).
Send this link to the test victim (within the lab environment).
When victim submits credentials → They appear in your terminal!

Output (Terminal View)

[*] Credential Harvester Page setup complete. [*] Listening on IP: 192.168.0.101 [*] Cloned site: https://twitter.com [*] Harvesting credentials from unsuspecting victim... [+] Username: victim_username [+] Password: victim_password