trustedsec/social-engineer-toolkit

Features

• Phishing Campaign Orchestrators - Orchestrates phishing campaigns by deploying fake emails and landing pages to track user interactions.
• Credential Harvesting Simulations - Simulates credential theft by mimicking login portals to test how easily users reveal sensitive account information.
• Phishing Capturers - Mimics legitimate login pages to capture usernames and passwords during authorized security assessments.
• Penetration Testing Suites - Offers a specialized suite of tools for security professionals to execute human-centric attack vectors.
• Phishing Attack Tools - Ships a system for creating and deploying deceptive emails and landing pages to evaluate user susceptibility.
• Social Engineering Simulations - Simulates common deception techniques to evaluate organizational resilience against social engineering.
• Security Training - Generates realistic attack scenarios used as educational resources for security awareness training.
• Security Listener Profiles - Spawns a local web server to capture credentials and session data in real time during security testing.
• DNS Spoofing Tools - Includes tools for intercepting and modifying DNS query responses to redirect target traffic.
• Evasive Payload Generators - Generates malicious documents and websites by injecting payloads into predefined templates.
• Reverse Shells - Establishes socket-based reverse shells for remote command execution on target machines.
• Website Cloning Tools - Provides automated site cloning to create convincing replicas of web pages for credential harvesting.
• Penetration Testing - Automates social engineering attack simulations.
• Security Tools - Framework for social engineering and penetration testing
• Social Engineering Tools - Comprehensive framework for simulating various social engineering attacks.

Star history