
By: chiheb chebbi
December 22, 2015
Social Engineering Attacks

By: chiheb chebbi
December 22, 2015
Social Engineering:
Social Engineering is the art of hacking humans.It i refers to psychological manipulation of people into performing actions or giving up confidential information.
Social engineering is based on cognitive biases
Wikipedia Definition: "Cognitive biases are tendencies to think in certain ways that can lead to systematic deviations from a "standard of rationality" or good judgment, and are often studied in psychology and behavioral economics."
The Social-Engineer Toolkit (SET)
The Social-Engineer Toolkit (SET) was created and written by the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering. SET has been presented at large-scale conferences including Blackhat, DerbyCon, Defcon, and ShmooCon. With over two million downloads, SET is the standard for social-engineering penetration tests and supported heavily within the security community.
To Download SET: git clone https://github.com/trustedsec/social-engineer-toolkit/ set/
Or if you are using Kali Linux you don't need to.
SMS Spoofing:
This is an amazing and improved feature that has made many security professionals think.
Open the command line Terminal and type: SET
Select Social Engineering Attack
select option 7: SMS spoofing attacks
select the option no 1: Perform SMS spoofing attack
select option no 1: SMS Attack single phone number
Now enter the victim’s Phone-number
select a template or use predefined templates