HAcking Tools

The Social-Engineer Toolkit v1.3.2 , New version Download !

The Social Engineering Toolkit (SET) is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It’s main purpose is to augment and simulate social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed.

This is the change log:

• Added a new feature to the SET interactive shell, grabsystem. Will allow you to elevate permissions on victi machine. Does not work on XP SP2 and below.
• Fixed a bug where if grabsystem was called on with UAC bypass, the UAC-Safe shell would hang
• Added better error handling of sockets and addresses in the socket handlers in the interactive shell
• Updated the code base in the shell.binary to add the new grabsystem and add better error handling
• Added default handling if listener port was nothing, defaults to port 443 now
• Fixed a bug in how third party handlers responded to certain character sets
• Slowly moving to __init__.py method as it’s proper and easier than sys.path.append

Before performing the steps below, be sure to install subversion before installing the selected tools. Subversion is simply a source version repository that allows you to keep up to date with any modifications or changes to SET.

The Social-Engineering Toolkit (SET) is a python-driven suite of custom tools which solely focuses on attacking the human element of pentesting. It’s main purpose is to augment and simulate social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed. Currently SET has two main methods of attack, one is utilizing Metasploit payloads and Java-based attacks by setting up a malicious website (which you can clone whatever one you want) that ultimately delivers your payload. The second method is through file-format bugs and e-mail phishing. The second method supports your own open-mail relay, a customized sendmail open-relay, or Gmail integration to deliver your payloads through e-mail. The goal of SET is to bring awareness to the often forgotten attack vector of social-engineering.
To download the Social-Engineer Toolkit, type the following:

root@fortress:/pentest/exploits/# svn co http://svn.secmaniac.com/

social_engineering_toolkit set/

Artillery is a honeypot/monitoring/prevention tool used to protect Linux-based systems. Artillery will setup multiple ports on the nix system and if anything touches it will automatically blacklist them. In addition, it monitors the filesystem for changes and emails the changes back to you. It also detects SSH brute force attacks and automatically blocks them as well.

root@fortress:/root/# svn co http://svn.secmaniac.com/artillery 

artillery/

Then python install.py

Egress Buster - Identify open outbound ports on a network Download here

Metasploit Modules released at Blackhat and Defcon - Download here

PowerShell Samples released at Blackhat and Defcon - Download here

Download the SET Desktop Background - Background download

Meterpreter script for Bypassing Windows 7 UAC unpatched as of Dec 31 - BypassUAC