using setool kit to send emails from gmail emails not being recieved

WEBATTACK_EMAIL=ON Email support in combination with credential harvester attackĪs we can see and from the image above SET will include as well in the attack and the email support in order to be able to send email directly to users after the launch of the attack.

SET will require from us additional information so we will import the information accordingly to the scenario that we have develop.You can see in the next image a sample of the information that we have to provide: SET – Java Applet Self Signed CertificateĪnother one important configuration that we can play with is the AUTO_DETECT option.When this option is set to ON the social engineering toolkit will detect automatically our local IP address and it will use it for the reverse connection of our attacks.If this option is set to OFF,the social engineering toolkit will ask for our public IP address.This can be used in a scenario that we are behind NAT and we want to use SET over the Internet.ĪUTO_DETECT=OFF SET asks for public IP when AUTO_DETECT option is OFFĪlso the web-based attack vectors like the credential harvester can be used in combination with email phishing in order to improve the success rate of the attack.The option that we have to configure is the following:

One of the most popular web-based attacks that the social engineering toolkit is also using is the Java applet attack.If we try to use this attack we will notice that SET is configured to use Microsoft as the publisher name.If we want to use a different publisher we can change the following setting to ON. So we need to browse to that directory first and then to find the set_config file which is located in the directory called config inside the SET folder.This file contains all the setting that it can be made in the social engineering toolkit.īy default SET is configured to use Gmail as the default email provider for sending emails to other users through SET.If we want to use other providers such as Yahoo and Hotmail we just change the following setting: In Backtrack SET is located in the following directory: One of the best tools for conducting social engineering attacks is SET which was developed by Dave Kennedy.The social engineering toolkit is already pre-configured to use some default settings in order to make it more easier for its users.However these settings can be altered in order to cover the needs of the scenario that the penetration tester will create.The changes that we can make are endless so in this article we will cover only the basic.

Using setool kit to send emails from gmail emails not being recieved