Social-Engineer Toolkit (SET) v1.4.2 released

The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET was designed to be released with the http://www.social-engineer.org launch and has quickly became a standard tool in a penetration testers arsenal. SET was written by David Kennedy (ReL1K) and with a lot of help from the community it has incorporated attacks never before seen in an exploitation toolset. The attacks built into the toolkit are designed to be targeted and focused attacks against a person or organization used during a penetration test.

Changelog

  • Fixed the path to UPX in Back|Track 5 if installed to /usr/bin/upx
  • Added the latest Cisco AnyConnect download and execute exploit from Metasploit
  • Added a message prompt if Apache is not detected being running. If it isn’t it will now ask if you want to start it (thanks ChrisJohnRiley)
  • Added auto migration into the Metasploit Client-Side attacks, previously it was only for Java Applet (thanks ChrisJohnRiley)
  • Changed the iframe width and height to be 100/100 to have better clips on Adobe PDF exploits (thanks ChrisJohnRiley)
  • Changed dnsspoof path to be reflective of Back|Track 5
  • Added support for Yahoo and Hotmail, you can now configure it in the set_config file at the very bottom as EMAIL_PROVIDER

Download

NJ Ouchn

"Passion is needed for any great work, and for the revolution, passion and audacity are required in big doses"