What is multi-Attack web method?
The Multi-Attack method will add a combination of attacks through the web attack menu. For example you can utilize the Java Applet, Metasploit Browser, Credential Harvester/Tabnabbing all at once to see which is successful.
Step 1: Choose multi-attack web method
sudo setoolkit
Step 2: Choose Phishing Option
- This is first method will allow SET to import a list of pre-defined web applications that it can utilize within the attack.
2. Site Cloner
- This is second method will completely clone a website of your choosing and allow you to utilize the attack vectors within the completely same web application you were attempting to clone.
3. Custom Import
- The third method allows you to import your own website, note that you should only have an index.html when using the import website functionality.
Step 3: choose phishing website
Step 3: Multi-Attack Web Attack Vector
The multi attack vector utilizes each combination of attacks and allow the user to choose the method for the attack. Once you select one of the attacks, it will be added to your attack profile to be used to stage the attack vector. When your finished be sure to select the ‘I’m finished’ option.
Once you select your attacking option that’s will be on and next you choose 7th option to proceed.
Step 4: Choose exploit
Step 5: choose payload and port forwarding
Step 6: victim view
Once your victim click your link you will get all information about your victim into your terminal see this below image.
NOTE: Don’t choose your local ip address because it’s only work for local network so you choose ngrok it’s work globally
Post a Comment