.

Need some SET toolkit guidance

<<

jjwinter

User avatar

Jr. Member
Jr. Member

Posts: 80

Joined: Mon Mar 05, 2012 10:33 pm

Post Wed Apr 02, 2014 5:43 am

Need some SET toolkit guidance

I've been experimenting with the SET toolkit that comes with Kali, trying to to send an email with an infected PDF to my test VM using a Gmail address, but Gmail catches and kills it every time. I've played with the encoders, but can't seem to get any of the built-in ones to do the the trick. How do you get these payloads out the door undetected?
<<

Mr-Inaudible

User avatar

Newbie
Newbie

Posts: 5

Joined: Tue Apr 01, 2014 5:41 am

Post Wed Apr 02, 2014 4:06 pm

Re: Need some SET toolkit guidance

Of course, gmail has good security, but even if you do something to make gmail allow this file, the victim computer's antivirus might detect it, there is no guarantee to make a payload totally undetectable. I recommend you to learn C++ and create your own Trojan which is much more hard to detect and even more secure, you can also use some methods for your Trojan to reduce the chance of detection. After all, client side attacks are not so technical, it's better to spent your time with server side attacks

Good luck my friend
"This is it... this is where I belong..."
I know everyone here... even if I've never met them, never talked
to them, may never hear from them again... I know you all...
<<

dynamik

Recruiters
Recruiters

Posts: 1119

Joined: Sun Nov 09, 2008 11:00 am

Location: Mile High City

Post Fri Apr 04, 2014 1:14 pm

Re: Need some SET toolkit guidance

Just send the mail directly yourself. Exim4 is a breeze to setup: dpkg-reconfigure exim4-config

You'll likely need a business account with your ISP or have something like a VPS that allows outbound SMTP. If you're testing this locally, you'll need to setup a POP/IMAP/web mail server that the client will access as well.

As noted above, default attacks in common tools are almost always caught, and you will want to use something custom in practice. However, the defaults are fine to play around with while you're learning.
The day you stop learning is the day you start becoming obsolete.
<<

jjwinter

User avatar

Jr. Member
Jr. Member

Posts: 80

Joined: Mon Mar 05, 2012 10:33 pm

Post Fri Apr 04, 2014 2:58 pm

Re: Need some SET toolkit guidance

Thanks for the help, I'll give that a go.

Return to Social Engineering

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software