E-Mail Attack Using SET

Antiviruses are installed on any computer, if you are going to buy new computer with windows operating system than standard security software will be included in the PC with a few months demo version license. Now this is very important for protecting our virtual life but the question is how much this security can last?

Now attacking any system starts by gathering information about victims machine. Information can be operating system version, Antivirus software name and signature version, pc firewall used…etc.

The easiest way to have this information remotely is using email. Because most antiviruses do include an antispam that will scan the e-mail and add «X-Antivirus-Status: » to the header to inform that the email is scanned and «X-Antivirus:» and this field may include the antivirus version with signature database version which is certainly important beside the email software used that you can exploit if it is vulnerable.

For sending email we can use SET that has «Spear-Phishing Attack Vectors», There are two options, one is to let SET do everything for you (option 1), the second is to create your own FileFormat payload and use it in your own attack.

1. Perform a Mass Email Attack

2. Create a FileFormat Payload

For mass mailing we can create a file with one email address per line under /pentest/exploits/SET/config/mailing_list.txt. So you can create a template and use it when you need it. Finally for sending the emails you have two options:

1. Use a GMAIL Account for your email attack.

2. Use your own server or open relay

Enter your choice: 1

Enter your GMAIL email address: [email protected]

Enter your password for gmail (it will not be displayed back to you):

SET has finished delivering the emails.

Next you can use any online multi-AV Scanners to check which antivirus your binaries can bypass so if it much victims antivirus than the victim is vulnerable. By the end I recommend to follow NSA new home security guidelines “NSA Presents ‘Best Practices for Keeping Your Home Network Secure’“as it provides a direct and easy way to keep your virtual life safe.

make sure you subscribe to my RSS feed!

Share
Subscribe
Notify of
guest
56 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
trackback
trackback
trackback

RT @_joviann_: [SecTechno] E-Mail Attack Using SET http://bit.ly/k7PX03 #security

trackback

#security E-Mail Attack Using SET: Antiviruses are installed on any computer, if you are going to buy n… http://bit.ly/k7PX03 #infosec

trackback

E-Mail Attack Using SET: Antiviruses are installed on any computer, if you are going to buy new computer with wi… http://bit.ly/k7PX03

trackback

E-Mail Attack Using SET: Antiviruses are installed on any computer, if you are going to buy new computer with wi… http://bit.ly/k7PX03

trackback

+1 RT @MBenLakhoua: E-Mail Attack Using SET: Antiviruses are installed on any computer, if you are going to buy… http://bit.ly/k7PX03

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2J #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2M #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2G #infosec

trackback

E-Mail Attack Using SET #Email Security #NSA #SET #Social Engineering Toolkit http://t.co/DEcHUXf RT @Sectechno

trackback
trackback

RT @_joviann_: [SecTechno] E-Mail Attack Using SET http://bit.ly/k7PX03 #security

trackback

+1 RT @MBenLakhoua: E-Mail Attack Using SET: Antiviruses are installed on any computer, if you are going to buy… http://bit.ly/k7PX03

trackback

E-Mail Attack Using SET #Email Security #NSA #SET #Social Engineering Toolkit http://t.co/DEcHUXf RT @Sectechno

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl7w #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl7R #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl7b #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2s #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2J #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2M #infosec

trackback

E-Mail Attack Using SET #Email Security #NSA #SET #Social Engineering Toolkit http://t.co/DEcHUXf RT @Sectechno

trackback

E-Mail Attack Using SET http://bit.ly/k7PX03

trackback

RT @_joviann_: [SecTechno] E-Mail Attack Using SET http://bit.ly/k7PX03 #security

trackback

RT @InfoSec4All: E-Mail Attack Using SET #Email Security #NSA #SET #Social Engineering Toolkit http://t.co/DEcHUXf RT @Sectechno

trackback

E-Mail Attack Using SET: [sectechno.com] #Antiviruses are installed on any computer, if you are going to buy… http://winsec.tk/Tx1M5

trackback

E-Mail Attack Using SET: [sectechno.com] #Antiviruses are installed on any computer, if you are going to buy… http://cybr.tk/Tx1Kl

trackback

+1 RT @MBenLakhoua: E-Mail Attack Using SET: Antiviruses are installed on any computer, if you are going to buy… http://bit.ly/k7PX03

trackback

E-Mail Attack Using SET #Email Security #NSA #SET #Social Engineering Toolkit http://t.co/DEcHUXf RT @Sectechno

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl8k #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl7R #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2s #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2M #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl2J #infosec

trackback

E-Mail Attack Using SET #Email Security #NSA #SET #Social Engineering Toolkit http://t.co/DEcHUXf RT @Sectechno

trackback
trackback

E-Mail Attack Using SET: [sectechno.com] #Antiviruses are installed on any computer, if you are going to buy… http://winsec.tk/Tx1M5

trackback

E-Mail Attack Using SET: [sectechno.com] #Antiviruses are installed on any computer, if you are going to buy… http://cybr.tk/Tx1Kl

trackback

E-Mail Attack Using SET http://bit.ly/lizLSs

trackback
trackback

E-Mail Attack Using SET http://bit.ly/lizLSs

trackback

E-Mail Attack Using SET http://t.co/1jQuJKV

trackback

E-Mail Attack Using SET http://t.co/1jQuJKV

trackback

E-Mail Attack Using SET http://t.co/1jQuJKV

trackback
trackback

E-Mail Attack Using SET http://bit.ly/lizLSs

trackback

E-Mail Attack Using SET: [sectechno.com] #Antiviruses are installed on any computer, if you are going to buy… http://winsec.tk/Tx1M5

trackback

E-Mail Attack Using SET: [sectechno.com] #Antiviruses are installed on any computer, if you are going to buy… http://cybr.tk/Tx1Kl

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl7w #infosec

trackback

#security E-Mail Attack Using SET http://dlvr.it/Ttl7R #infosec