EN
ENNA
SO

Social-Engineer Toolkit

Featured

🔥 Offensive Ops · Python

The Social-Engineer Toolkit (SET) is an open-source penetration testing framework designed for social engineering attacks. Created by David Kennedy, it integrates with Metasploit and provides attack vectors including spear-phishing (email), website cloning for credential harvesting, infectious media (USB), mass mailers, and HID attacks. SET automates the creation of believable attack scenarios and is a standard tool in social engineering assessments.

View on GitHub

Use Cases

  • Spear-phishing campaign creation and delivery
  • Website cloning for credential harvesting
  • USB/HID attack payload generation
  • QR code and wireless attack vectors
  • Social engineering awareness testing

Tags

social-engineeringphishingcredential-harvestusb-attackhid

Details

Category
🔥 Offensive Ops
Language
Python

Platforms

🐧linux🍎macos

Links

GitHub Repository

github.com/trustedsec/social-engineer-toolkit

Releases

github.com/trustedsec/social-engineer-toolkit/releases

Issues

github.com/trustedsec/social-engineer-toolkit/issues

Alternatives & Comparisons

GoPhish

Go

Open-source phishing framework. Create campaigns, track results, and train users with realistic simulations.

Evilginx2

Go

Man-in-the-middle attack framework for phishing credentials and session cookies, bypassing 2FA.

More in Offensive Ops

Mythic

Go

Collaborative, multi-platform C2 framework. Docker-based with web UI, multiple agent types, and plugin architecture.

c2red-teammulti-operator

Havoc

C/C++

Modern C2 framework. Qt-based GUI, BOF support, custom agents, and a Cobalt Strike-inspired workflow.

c2red-teamgui

Rubeus

C#

C# toolset for raw Kerberos interaction and abuse. AS-REP roasting, Kerberoasting, ticket manipulation, delegation attacks.

kerberosactive-directoryroasting

Certipy

Python

Active Directory Certificate Services (AD CS) abuse tool. Find and exploit certificate template misconfigurations.

active-directorycertificatesadcs

Coercer

Python

Automatically find and exploit Windows authentication coercion vulnerabilities. PetitPotam, PrinterBug, and more.

authentication-coercionntlm-relaypetitpotam

SharpHound

C#

Official BloodHound data collector. Enumerates Active Directory objects, sessions, ACLs, and trusts for graph analysis.

active-directoryenumerationbloodhound