Social Engineering Toolkit

Java Applet Attack(using SET)

CYBERATOR

Step 1:

            Start the SET(Social Engg. Toolkit) and select option 1

Step 2:

            Now select option number 2

Step 3:

             Now select "java applet attack method"

Step 4:

           Select website template. If you want to copy any website, you can use the second option also.

Step 5:

           Now provide your local IP address. If you are conducting the attack on WAN you must do port forwarding first and provide your public IP instead.

Step 6:

           I have selected Website template option so I'm having a list of built in templates. Choose any of the following...I have selected facebook

Then select the Payload that you want to be executed:

Windows Reverse_TCP Meterpreter

Step 7:

            Select the Encryption type and Set the PORT number and press Return:

Step 8:

           Startup the Victim PC : Windows 7 ultimate 64 bit

                              Browser    : Google Chrome Updated

                              Java           : Latest Version(Version 7 Update 45)

           Now type Attacker's IP on which the server is running in the URL bar.

           Wait for the handler running on Kali to get the meterpreter sessio

Step 9:

          Type sessions -i <Session ID>

          We are now inside meterpreter, now just use post exploitation commands Like:

           sysinfo

           shell

           getprivs

           shutdown.....etc