Social Engineering Tools

Social Engineering Tools

King Phisher: A free and open-source phishing campaign toolkit. King Phisher helps users simulate real-world phishing attacks and includes features such as embedded email images, credential harvesting, and website cloning.

Maltego: A powerful OSINT and link analysis tool with free and paid versions. Maltego features integrations with dozens of data sources, including Mandiant, Censys, PolySwarm, Splunk, and many more.

Wifiphisher: A free and open-source rogue access point framework for Wi-Fi security testing. Wifiphisher lets users run man-in-the-middle and web phishing attacks to capture user credentials and spread malware.

ReelPhish: A free and open-source automated tool for two-factor authentication phishing. ReelPhish is developed by Mandiant and supports multi-page authentication techniques

Evilginx: A free and open-source man-in-the-middle attack framework. Evilginx can be used to steal users’ login credentials and session cookies, allowing the tool to bypass two-factor authentication.

Ghost Phisher: A free and open-source wireless and ethernet phishing tool. Ghost Phisher supports features such as webpage hosting, credential logging, Wi-Fi access point emulation, session hijacking, and more.

GoPhish: A free and open-source phishing toolkit for organizations. GoPhish can run on Windows, macOS, and Linux and lets users quickly and easily spin up phishing attacks.

Credential Harvester Attack: A free and open-source tool in the Social-Engineer Toolkit (SET) for credential theft. The Credential Harvester tool clones a legitimate website and steals users’ login information and passwords.

Miscellaneous Tools

OpenSSL: A free and open-source security toolkit for SSL and TLS cryptography. OpenSSL is widely used by Internet servers for secure network communications

Pcredz: A free and open-source tool for extracting different credential types from packet capture files. Pcredz includes support for a wide variety of protocols and logs all credentials to a single file for easy access.

Mimikatz: A free and open-source tool for extracting passwords and other credentials from Windows memory. Mimikatz can also perform credential theft attacks such as pass-the-hash and pass-the-ticket.

Sysinternals Suite: A free collection of Windows system utilities from Microsoft for debugging and security analysis. The Sysinternals Suite includes more than 80 tools for working with Windows systems.

Learn the Top Hacking Tools with 

This article has briefly gone over some of the best hacking software & tools—so how do you learn to use them? If you’re interested in ethical hacking,go and follow @abbalombc