> For the complete documentation index, see [llms.txt](https://ivalexev.gitbook.io/rednote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ivalexev.gitbook.io/rednote/pentesting-process/social-engineering.md).

# Social Engineering

Exploiting the weak minds of humans.

<table><thead><tr><th width="170">Tool</th><th>Details</th></tr></thead><tbody><tr><td><a href="https://github.com/gophish/gophish">gophish</a></td><td>Gophish is a powerful open source framework that allows you to start a phishing campaign.</td></tr><tr><td><a href="https://help.evilginx.com/">evilginx</a></td><td>Man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection.</td></tr><tr><td><a href="https://github.com/fin3ss3g0d/evilgophish">evilgophish</a></td><td>evilginx + gophish</td></tr><tr><td><a href="https://github.com/fkasler/cuddlephish">cuddlephish</a></td><td>Weaponized Browser-in-the-Middle (BitM). Stream a video of your browser to the user’s browser and log every input.</td></tr><tr><td><a href="https://github.com/trustedsec/social-engineer-toolkit">social-engineer-toolkit</a></td><td>Framework open-source designed for social engineering. SET has a number of custom attack vectors that allow you to make a believable attack quickly.</td></tr></tbody></table>

* [Caller ID spoofing techniques](https://usa.kaspersky.com/resource-center/preemptive-safety/phone-number-spoofing) (via VoIP)
* [SIM swapping](https://www.natwest.com/fraud-and-security/fraud-guide/sim-swapping-scams.html)
* [Homograph URLs](https://en.wikipedia.org/wiki/IDN_homograph_attack)
* [Prompt Bombing](https://www.tripwire.com/state-of-security/mfa-prompt-bombing-what-you-need-know) (MFA)
* [USB Dropping](https://www.tripwire.com/state-of-security/featured/does-dropping-malicious-usb-sticks-really-work-yes-worryingly-well/)
* [Watering Hole](https://en.wikipedia.org/wiki/Watering_hole_attack)

***

### Website Copier

<table data-header-hidden><thead><tr><th width="137.63641357421875"></th><th></th></tr></thead><tbody><tr><td>wget</td><td><code>wget -E -k -K -p -e robots=off -H -D &#x3C;DOMAIN> -nd "&#x3C;URL_PAGE>"</code></td></tr><tr><td><a href="https://github.com/xroche/httrack">httrack</a></td><td><code>httrack &#x3C;URL-PAGE></code></td></tr><tr><td><a href="https://github.com/goclone-dev/goclone">goclone</a></td><td><code>goclone &#x3C;URL-PAGE></code></td></tr></tbody></table>