No description
Find a file
Meitar M 390160d74b
Fix HTTP headers, use HTTP 302 Found in response to POST requests.
This commit brings the SET Harvester into better conformance with the
HTTP specification. Notably, this makes it possible to use the Harvester
module behind strict layer 7 reverse proxies (such as Cloudflare, Ngrok,
and similar) that require proper HTTP response headers for all replies.

The major change is the addition of a proper HTTP `302 Found` redirect
using the `Location` HTTP header and the addition of an HTML5 document
type declaration (`<!doctype html>`) prepening the body of the reply
sent to a visitor when submitting the SET Harvester's phishing login
form. Smaller changes include correcting misspellings in other HTTP
headers (`Content_type` -> `Content-Type`) in various places.
2020-03-19 23:35:50 -04:00
.github GitHub Actions: Python 3.5, 3.6, 3.7 on Ubuntu 2019-12-19 00:01:27 +01:00
modules fix ratte showing up in modules 2020-02-03 20:52:04 -05:00
readme update license date 2020-02-04 16:45:29 -05:00
src Fix HTTP headers, use HTTP 302 Found in response to POST requests. 2020-03-19 23:35:50 -04:00
.gitignore there is no need for django and flask stuff 2017-10-30 15:01:23 +02:00
README.md update readme info 2020-02-04 18:43:49 -05:00
requirements.txt Fixes #651, fixes #660: Pin pymssql requirement to existing version. 2019-12-10 00:43:19 -05:00
seautomate Make seautomate functional with Python 3. 2020-03-10 14:33:22 -04:00
seproxy Normalize user config path usage with string append and os.path.join(). 2018-02-01 10:36:21 -08:00
setoolkit Port original pyminifakedns, circa 2006, to Python 3. 2020-03-14 02:18:18 -04:00
setup.py Use print() function in both Python 2 and Python 3 2020-02-04 06:20:34 +02:00
seupdate Updated {} to {0} 2016-07-28 16:16:24 -07:00

💼   The Social-Engineer Toolkit (SET)   💼

Copyright 2020 The Social-Engineer Toolkit (SET)

Written by: David Kennedy (ReL1K) @HackingDave

Company: TrustedSec

DISCLAIMER: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal purposes, period.

Please read the LICENSE under readme/LICENSE for the licensing of SET.

📖   SET Tutorial   📖

For a full document on how to use SET, visit the SET user manual.

💻   Features   💻

The Social-Engineer Toolkit is an open-source penetration testing framework designed for social engineering. SET has a number of custom attack vectors that allow you to make a believable attack quickly. SET is a product of TrustedSec, LLC an information security consulting firm located in Cleveland, Ohio.

Bugs and enhancements

For bug reports or enhancements, please open an issue here.

Supported platforms

  • Linux 🐧
  • Mac OS X 🍎

📥   Installation   📥

Resolve dependencies

Ubuntu/Debian System

  • Linux
  • Mac OS X (experimental)

Installation

Install via requirements.txt

pip3 install -r requirements.txt python setup.py

Install SET

All OSs

git clone https://github.com/trustedsec/social-engineer-toolkit/ setoolkit/
cd setoolkit
pip3 install -r requirements.txt
python setup.py