Audience
Penetration Testing platform for companies
About Social-Engineer Toolkit (SET)
The Social-Engineer Toolkit (SET) was created and written by Dave Kennedy, the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering. It has been presented at large-scale conferences including Blackhat, DerbyCon, Defcon, and ShmooCon. With over two million downloads, it is the standard for social-engineering penetration tests and supported heavily within the security community. It has over 2 million downloads and is aimed at leveraging advanced technological attacks in a social-engineering type environment. TrustedSec believes that social engineering is one of the hardest attacks to protect against and now one of the most prevalent.
Other Popular Alternatives & Related Software
Phishing Club
Phishing Club is an open source phishing simulation and red team phishing framework for authorized security testing. Self host it on your own server via a one line installer or Docker.
Plan, launch, and measure realistic campaigns from a single Go binary with an embedded web UI, HTTP/HTTPS phishing servers, and a REST API.
Features: multi stage phishing flows, flexible scheduling, multiple domains with automatic TLS, SMTP or custom API delivery with OAuth, recipient groups with CSV import and SCIM, PDF campaign reports, analytics, multi tenancy, MFA and
SSO (Entra ID, OIDC), webhooks, and in app updates.
Red team and AiTM: reverse proxy phishing to capture sessions, remote browser phishing, DOM and URL rewriting, dynamic obfuscation, JA4 and geo IP filtering, and device code phishing.
Learn more
Clone Systems Penetration Testing
Automated Penetration Testing from Clone Systems is a browser-based security testing service for teams that need to assess external and internal infrastructure, Active Directory, cloud environments, web applications, and supported APIs. Users define targets and exclusions in a portal, then launch production-safe attack playbooks that attempt to validate whether weaknesses are exploitable. Findings include severity and exploit evidence, remediation guidance, and mapping to MITRE ATT&CK; teams can rerun tests after fixes during the 30-day testing window. Reports provide an executive summary and technical details for security and compliance workflows, including PCI DSS 4.0.1, HIPAA, SOC 2, and ISO 27001. Clone Systems also offers separately scoped, engineer-led penetration testing for engagements requiring human-led assessment.
Learn more
sqlmap
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections. Support to directly connect to the database without passing via a SQL injection, by providing DBMS credentials, IP address, port and database name. Automatic recognition of password hash formats and support for cracking them using a dictionary-based attack. Support to dump database tables entirely, a range of entries or specific columns as per user's choice. The user can also choose to dump only a range of characters from each column's entry.
Learn more
SynerComm
SynerComm’s CASM (continuous attack surface management) Engine platform uses vulnerability analysis and human-led penetration testing to proactively search for vulnerabilities in your attack surface. Any vulnerabilities that are discovered are documented and forwarded to your team, along with our mitigation and remediation suggestions. Our CASM Engine platform does more than just look for vulnerabilities: it also gives you and your team an accurate inventory of your digital assets. Our platform typically unearths 20% to 100% more assets than the client was aware they even had. Unmanaged systems often become more vulnerable over time as new security gaps and shortcomings are discovered by attackers. Without ongoing management, these vulnerabilities aren’t addressed, leaving your entire network compromised.
Learn more
Integrations
No integrations listed.
Company Information
TrustedSec
Founded: 2012
United States
www.trustedsec.com/tools/the-social-engineer-toolkit-set/
Videos and Screen Captures
Other Useful Business Software
Comet Backup - Fast, Secure Backup Software for MSPs
Comet is a flexible backup platform, giving you total control over your backup environment and storage destinations.
Product Details
Platforms Supported
Cloud
Training
Documentation
Webinars
Videos
Support
Phone Support
Online
