27. Social Engineering Awareness
27.4 The SET Toolkit (Awareness Only)
Kali madhe Social-Engineer Toolkit (SET) naav cha tool aahe. To phishing pages, fake emails ani payloads banavu shakto. Aapan to attack sathi vaparnar nahi – fakt he samajnyasathi ki attacker kiti sahajtene ek khari-disnari fake login page banavu shakto, mhanun aapan alert rahave.
- SET can clone a real login page so it looks identical to the original.
- It can craft phishing emails and malicious files.
- Authorised companies use it (with written permission) for awareness training – sending a safe fake phishing mail to staff and measuring who clicks, then training them.
SET is for authorised training only
Cloning a real login page and sending it to people is illegal without written authorisation, even as a "joke" or "test". We name SET so you understand how convincing fakes are made – so you and your students never fall for one.
Ravindra Bagale's Tip
SET baghitlyavar students la kalte ki fake login page kharya sarkhich diste – URL sodun kahi farak nasto. Mhanun nehmi address bar madhla URL ani HTTPS lock tapasa – tech ekmev khari olakh aahe. Page kitihi khari disli tari URL khota asto.
Practice task
Without using SET, explain in your notes why you cannot trust how a login page looks, and what the only reliable check is (the exact URL and HTTPS). Give an example of a lookalike URL for a bank or wallet you use.