performing-social-engineering - Perform Social Engineering Attacks and Assessments
Conduct phishing campaigns, credential harvesting, and pretexting using Gophish, SET, and custom techniques for security assessments.
Tags
Updated: 2026-06-30Capabilities
What this skill does
- Create phishing email templates
- Configure phishing campaign infrastructure
- Clone legitimate websites
- Harvest credentials via fake pages
- Send spoofed emails
- Generate malicious Office macros
- Deploy credential harvesting servers
- Send phishing SMS messages
- Generate QR code phishing payloads
- Create USB drop attack payloads
- Hook browsers using BeEF
- Create fake update pages
- Track email open and click metrics
- Gather social media reconnaissance data
Inputs
- Target user email list
- SMTP server credentials
- Target website URL
- Attacker server IP address
- Target organization information
- Domain names for phishing infrastructure
- SSL certificate for HTTPS
Outputs
- Phishing campaign reports
- Harvested credentials
- Email tracking metrics
- Cloned website files
- Malicious payload files
Requirements
- Gophish framework installed
- Social Engineering Toolkit installed
- BeEF framework installed
- SMTP server access
- Web server for hosting phishing pages
- Linux operating environment
- Written authorization for engagement