← Back to CourseLab // EHE-10Social Engineering: SET Credential Harvester
Score100/100
Legal Warning
Phishing infrastructure and credential harvesting are only legal in authorized penetration tests or controlled lab environments. Deploying SET against real users without written consent violates the CFAA and Computer Misuse Act.
PhaseLaunch SETConfigureHarvestCapture
pentester@kali:~$
0 / 8 objectives0%
Objectives▼
Hints▼
Command Reference▼
setoolkit
Launch the Social-Engineer Toolkit
1
Social-Engineering Attacks (inside SET)
2
Website Attack Vectors (inside SET)
3
Credential Harvester Attack Method
2 (cloner)
Site Cloner (after Credential Harvester)
99
Return to previous menu / main menu
help
Show available commands
objectives
Print current objectives
clear
Clear terminal output
Scenario Brief▼
Target Organization
NovaCorp Technologies — internal red team engagement. Kali attacker: 10.0.1.99
Target Portal
https://login.novacorp-tech.com — employee SSO portal to be cloned
Objective
Use SET to clone the NovaCorp login portal and capture employee credentials via a phishing listener to demonstrate social engineering risk