【2014-06-01】某《魔鬼训练营》读书笔记：setoolkit群发邮件

[历史归档]本文原发布于 cstriker1407.info 个人博客内容为历史存档仅供参考。发布时间2014-06-01 标题某《魔鬼训练营》读书笔记setoolkit群发邮件分类操作系统 / 安全 标签社会工程学·setoolkit某《魔鬼训练营》读书笔记setoolkit群发邮件setoolkit群发邮件的基本流程笔记仅供学习交流使用请勿进行其他用途setoolkit是一个非常有用的社会工程学工具里面有很多工具这里作者只笔记下其最简单的使用方法。setoolkit群发邮件的基本流程The Social-Engineer Toolkit is a product of TrustedSec. Visit: https://www.trustedsec.com Select from the menu:1)Social-Engineering Attacks 。。。。。。。。 set1#选项15)Mass Mailer Attack 。。。。。。。。 set5#选项51. E-Mail Attack Single Email Address2. E-Mail Attack Mass Mailer99. Return to main menu. set:mailer1#简单测试这里只发送给一个接受者而且是自发自收set:phishingSend email to:setattackergmail.com#收件人1. Use a gmail Accountforyour email attack.2. Use your own server oropenrelay set:phishing1#使用gmail发送邮件set:phishingYour gmail email address:setattackergmail.com#发件人邮箱set:phishingThe FROM NAME the user will see:IT Admin#发件人姓名Email password:#发件人密码set:phishingFlag this message/s as high priority? :yes#优先级set:phishingEmail subject:Important Visit The Website#邮件标题set:phishingSend the message as html or plain?horp:p#邮件正文[!]IMPORTANT: When finished,typeEND(all capital)thenhit{return}on a new line. set:phishingEnter the body of the message,typeEND(capitals)when finished:Hi Next line of the body: It is important!Please click http://116.62.110.235/blog ASAP!!Next line of the body: END#大写END结束[*]SET has finished sending the emails Pressreturntocontinue然后我们就可以看到这封邮件了。里面还有链接。如下图