security enabled verified high v1.0.0

setoolkit

Social Engineer Toolkit for automating credential harvesting, phishing campaigns, and payload generation.

📋 Live Preview
setoolkit
setoolkit

Sandbox: execFile · Timeout: 600s

Capabilities

social.engineering
credential.harvesting
phishing.campaign
payload.generation
website.clone

Parameters

Name Type Required Default Description Aliases
menu-1 string No - Option 1: Social-Engineering Attacks
menu-2 string No - Option 2: Penetration Testing
menu-3 string No - Option 3: Third Party Modules
menu-4 string No - Option 4: Update SET
menu-99 string No - Option 99: Exit

Contract

Inputs

network.target.email

Target email address for phishing

network.url

URL to clone for credential harvesting

network.lhost

Local IP for reverse connections

network.lport

Local port for reverse connections

Outputs

credential.data

Harvested credentials

payload.binary

Generated malicious payload

Side effects: network_trafficnetwork_trafficnetwork_traffic

Workflow Edges

Produces

credential.datapayload.binary

Consumes

network.target.emailnetwork.urlnetwork.lhostnetwork.lport

Resource Profile

ResourceValue
CPUmedium
Memory128 MB
Networkmedium
Disk I/Olow

Examples

Launch SET main menu

setoolkit

Website attack vectors - credential harvesting

setoolkit (then navigate: 1) Social-Engineering Attacks > 2) Website Attack Vectors > 3) Credential Harvester Attack Method > 2) Site Cloner)

Generate malicious payload with Metasploit

setoolkit (then navigate: 1) Social-Engineering Attacks > 4) Infectious Media Generator)

Phishing email campaign

setoolkit (then navigate: 1) Social-Engineering Attacks > 5) Mass Mailer Attack)

Quick penetration testing tools

setoolkit (then navigate: 2) Penetration Testing)

Documentation

SET — Social Engineer Toolkit

The Social-Engineer Toolkit (SET) is an open-source penetration testing framework designed for social engineering. It automates credential harvesting, phishing campaigns, website cloning, and payload generation.

Attack Vectors

Menu Category Description
1 Social-Engineering Attacks Phishing, credential harvesting, payload delivery
2 Penetration Testing Quick access to Metasploit and other tools
3 Third Party Modules Community-contributed modules
4 Update SET Update the toolkit to latest version
99 Exit Exit the framework

Social-Engineering Attack Types

  1. Spear-Phishing Attack Vectors
  2. Website Attack Vectors (credential harvesting, web jacking)
  3. Infectious Media Generator
  4. Create a Payload and Listener
  5. Mass Mailer Attack
  6. Arduino-Based Attack Vector
  7. SMS Spoofing Attack Vector
  8. Wireless Access Point Attack Vector
  9. QRCode Generator Attack Vector
  10. Powershell Attack Vectors
  11. Third Party Modules

Dependencies

python3

Related Tools

beefmetasploitgophish

References