Tools for Performing Social Engineering Attacks

Social Engineering Toolkit (SET)

A set of tools that can be used to carry out a variety of social engineering attacks including a phishing campaign, credential harvesting, malware creation, and much more.

Gophish

An open-source platform for performing phishing campaigns.

Evilginx

On-path attack framework used for phishing login credentials along with session cookies to bypass MFA.

theHarvester

Ths tool gathers open-source intelligence on a target from a wide range of public resources to discover names, emails, IPs, subdomains, and URLs.

Maltego

This tool allows the user to input a target (this can be a domain, company, person, etc) and then ? searches the Internet for all related information on the target including social media links, IP addresses, DNS servers, and much more.

Recon-ng

This Linux based tool contains many different modules that can be used for information gathering on targets such as web applications, IoT devices, and domains.

Browser Exploitation Framework (BeEF)

? is a powerful tool used to exploit web browsers and launch various types of attacks. It can be used to carry out phishing attacks by creating fake websites and performing credential harvesting.