Phishing Attack using SETOOLKIT in Kali Linux

 

                                                                Information Security Analysis
                                     PHISHING ATTACK USING SETOOKIT IN KALI

TASK 1: PHISHING ATTACK

What is Phishing Attack?

Phishing attacks are the practice of sending fraudulent communications that appear to come from a reputable source. It is usually done through email. The goal is to steal sensitive data like credit card and login information, or to install malware on the victim's machine.

Why attackers perform phishing attack?

• ·                  Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers.
• ·                  It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message.
• ·         The recipient is then tricked into clicking a malicious link, which can lead to the installation of malware, the freezing of the system as part of a ransomware attack or the revealing of sensitive information.

 

HOW TO DO PHISHING ATTACK:

Using SETOOLKIT: The Social-Engineer Toolkit (SET) is an open-source penetration testing framework designed for social engineering. SET has a number of custom attack vectors that allow you to make a believable attack in a fraction of time. These kind of tools use human behaviors to trick them to the attack vectors.

• To perform this experiment, first open Kali Linux 'terminal'

ifconfig: to get the ip-address of Kali XXX.XX.XXX.XX (Below the Blue Line)

setoolkit: to initialize Social Engineering Toolkit 

Select option 1 to perform Social-Engineering Attacks-

Select option 2 for Website Attack Vectors-

Select option 3 for Credential Harvester Attack method-

METHOD 1: USING INBUILT WEB TEMPLATES

Select option 1 for Web Templates-

Enter IP Address of Kali: XXX.XX.XXX.XX

Select option 2 for Google template

 Open a New Browser and Search localhost

Enter some credentials login-id – abc123@gmail.com and password - 987654321

 

Here, is the actual google page after login-

We successfully, stolen credentials login-id: abc123@gmail.com & password: 987654321

We have successfully, performed phishing attack using SETOOLKIT with first method of using standard web template and able to steal user credentials login-id and password. 

Thanks for Reading!

Mukul Kumar