Hack Like a Pro: How to Spear Phish with the Social Engineering Toolkit (SET) in BackTrack « Null Byte :: WonderHowTo

Welcome back, my rookie hackers!Many newbie hackers focus upon the technical aspects of hacking and fail to give enough attention to social engineering. In fact, I would say that technical hacks should ONLY be attempted if social engineering attacks fail. Why bother spending hours or days trying to hack a password if someone will simply give it to you?Social engineering is the act of getting people to give you the information you seek, usually by gaining their trust. That trust may be gained by posing as someone in authority, a colleague, or just someone who needs help. Some of the best hackers in history, including Kevin Mitnick, have been great social engineers.BackTrackhas a tool to assist and automate social engineering attacks calledSET, or theSocialEngineeringToolkit. SET was developed by David Kennedy and simplifies a number of social engineering attacks such as phishing, spear-phishing, malicious USBs, etc. Furthermore, it has been integrated withMetasploitso that we can use Metasploit exploits and payloads in our social engineering attacks.The current version of the Social Engineering Toolkit includes the following types of attacks.SpearphishingWebsitesMalicious USBsSo, let's fire up our BackTrack and explore the Social Engineering Toolkit!Step 1: Open SETTo start using the Social Engineering Toolkit, go toBackTrack, thenExploitation Tools, thenSocial Engineering Tools, thenSocial Engineering Toolkit, and click onset.Step 2: Pick Your TypeThis should open the main menu for the Social Engineering Toolkit. Note that it offers:Spear-Phishing AttacksWebsite AttacksInfectious Media GeneratorCreate a Payload and ListenerMass Mailer AttackArduino-based Vector AttackSMS Spoofing AttackWireless Access PointAnd many othersIn this tutorial, we'll be looking at creating a spear-phishing attack. For those of you not familiar with this terminology, a phishing attack is an email attack with a broad "net" in an attempt to try to pick up a few random victims. A spear-phishing attack is similar, except that it targets one or a few individuals. In other words, it's a targeted social engineering attack, hence the spear.Step 3: Spear-PhishLet's now select number 1 from the menu and begin our spear-phishing attack. When we do, we will be greeted with the screen below.It explains what a spear-phishing attack is and asks us how we want to go about our attack. We can choose:Mass email attackFileFormat payloadSocial engineering templateLet's select a FileFormat attack. Type number 2 and press enter.Step 4: Choose an AttackAfter we select our FileFormat type attack, we will be asked what type of exploit we would like to use. Notice that the default is the PDF with the embedded .exe. In this hack, let's use the Microsoft Word RTF Fragments attack or MS10_087.This will create a Word document that will overflow a buffer and enable us to put a listener or rootkit on the victim's machine. Type 4 and press enter.Step 5: Choose a PayloadNow that we have decided what type of file we want to use in our attack, our next step is to decide what type of listener (aka rootkit, aka payload) we want to leave on the victim system. These may look familiar to those of you who have used Metasploit as these are Metasploit payloads.Let's be ambitious and try to get the Metasploit meterpreter on that victim's machine. If we are successful, we will completely own that system!Step 6: Create the FileAfter we type number 5 and press enter, we must choose what port we want to listen on (the default 443). SET then goes about creating our malicious file for us. It names that file template.rtf.Step 7: Rename the FileIf we want to trick the victim into opening the file, we should name it something that sounds enticing or familiar to the victim. Now this will differ depending upon the victim, but in our scenario we're trying to spear a manager at a large company, so let's call it SalesReport, something he or she might actually be expecting in their email.Step 8: Create the EmailNow that we have created the malicious file, we now need to create the email. This is important. If we're to get the victim to open the file, the email must look legitimate. SET prompts us whether we want to use a pre-defined template or a one-time-use email template. Let's be creative and choose a one-time-use email.SET then prompts us for the subject of the email. In this case, I used Sales Report. SET then asks us whether we want to send it in html or plain text. I chose html to make it look more inviting and legitimate. Finally, SET prompts us to write the body of the email and then type Control + C when we are finished. I wrote:Dear BigShot:Please find attached my quarterly sales report. If you have any questions, please feel free to ask.Sincerely,Your MinionOf course, your email will differ depending upon who you're sending it to, but try to make it sound enticing and legitimate or they aren't likely to open the attached malicious file and our attack will fail.When we're finished, SET will ask us whether we want to use a Gmail account or send it from our SMTP server. In most cases, we will want to use a Gmail account. Simply type in your address (you might want to create an anonymous email account for this purpose) and password, and SET will send the email you created with the malicious attachment from this Gmail account.We will be using some of the other features of the Social Engineering Toolkit in future tutorials, so keep coming back!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseFishermenandphishingimages via ShutterstockRelatedThe Hacks of Mr. Robot:How to Send a Spoofed SMS Text MessageHow To:Use "SET", the Social-Engineer ToolkitHow To:Use Social Engineering to Hack ComputersHack Like a Pro:The Ultimate Social Engineering HackNews:How to Study for the White Hat Hacker Associate Certification (CWA)News:Malware Targets Mac Users Through Well-Played Phishing AttackNews:'Impossible to Identify' Website Phishing Attack Leaves Chrome & Firefox Users Vulnerable (But You Can Prevent It)News:The Hack of the Century!News:White House Hacked by Russian Hackers!News:What Does Britney Spears Have to Do with Russian Hackers? More Than You ThinkSocial Engineering:The Most Powerful HackSocial Engineering, Part 2:Hacking a Friend's Facebook PasswordHow To:Advanced Social Engineering, Part 1: Exact Revenge on Craigslist Scammers with Tabnab PhishingSocial Engineering, Part 1:Scoring a Free Cell PhoneWeekend Homework:How to Become a Null Byte Contributor (2/17/2012)Listen In:Live Social Engineering Phone Calls with Professional Social Engineers (Final Session)Listen In:Live Social Engineering Phone Calls with Professional Social Engineers (Week 2)Listen In:Live Social Engineering Phone Calls with Professional Social EngineersHow To:The Official Google+ Insider's Guide IndexDrive-By Hacking:How to Root a Windows Box by Walking Past ItNews:Live Social EngineeringHow To:Proof of Social Engineering Success!How To:Advanced Social Engineering, Part 2: Hack Google Accounts with a Google Translator ExploitHow To:Score Free Game Product Keys with Social EngineeringNews:Backtrack 5 Security Essentials