What is Social-Engineer Toolkit (SET)?
Created by Dave Kennedy, who is the founder of TrustedSec, the Social-Engineer Toolkit (SET) is an open-source resource developed in Python that specializes in penetration testing focused on social engineering techniques. This toolkit has made appearances at prominent cybersecurity events, including Blackhat, DerbyCon, Defcon, and ShmooCon. With an impressive milestone of more than two million downloads, SET has established itself as the preferred tool for executing social-engineering penetration tests, garnering significant backing from the cybersecurity community. Its architecture is specifically designed to leverage advanced technological vulnerabilities within the realm of social engineering. TrustedSec highlights that social engineering represents one of the most significant challenges in cybersecurity and has grown more prevalent in the current threat landscape. As a result, the toolkit is an essential asset for security experts seeking to bolster their defenses against these intricate and evolving tactics. Its continuous updates and community contributions ensure that SET remains relevant in addressing new challenges in the field.
Integrations
No integrations listed.
Similar Software to Social-Engineer Toolkit (SET)
NINJIO offers a comprehensive cybersecurity awareness training platform designed to mitigate human-related cybersecurity threats through captivating training, tailored assessments, and detailed reporting. This holistic method emphasizes contemporary attack methods to enhance employee awareness and leverages insights from behavioral science to refine users' instincts. Utilizing our exclusive NINJIO Risk Algorithm™, we pinpoint social engineering weaknesses within users based on phishing simulation results, tailoring content delivery to create a customized experience that promotes lasting behavioral change.
With NINJIO, you will benefit from:
- NINJIO AWARE, which provides training centered around attack vectors, captivating audiences with Hollywood-style micro-learning episodes derived from actual hacking incidents.
- NINJIO PHISH3D, a simulated phishing tool that uncovers specific social engineering tactics that are most likely to deceive individuals in your organization.
- NINJIO SENSE, our innovative training course grounded in behavioral science, which immerses employees in experiences that replicate the emotional manipulation tactics used by hackers. Additionally, this approach fosters a more vigilant workforce equipped to recognize and counteract potential threats effectively.
Learn more
Astra's Pentest offers a thorough approach to penetration testing, combining an advanced vulnerability scanner with detailed manual testing services.
This automated scanner executes over 10,000 security assessments, addressing all CVEs highlighted in the OWASP top 10 and SANS 25, while also fulfilling the necessary evaluations for ISO 27001 and HIPAA compliance.
Users benefit from an interactive pentest dashboard that facilitates vulnerability analysis visualization, allows for the assignment of vulnerabilities to team members, and encourages collaboration with security experts.
Additionally, for users who prefer not to navigate back to the dashboard repeatedly, Astra provides integrations with CI/CD platforms and Jira, streamlining the process of vulnerability management and assignment.
This seamless integration enables teams to efficiently address security concerns without disrupting their workflow.
Learn more
Phishing Club
Phishing Club is a self hosted framework for simulated phishing and red team phishing, built for organizations that test their people and defenses with permission. Teams run it on their own infrastructure through a one line installer or
Docker, keeping every campaign and all collected data under their control.
Operators create realistic email and landing page lures, organize targets into groups loaded from CSV or provisioned over SCIM, and schedule campaigns around working hours. Messages send over SMTP or an OAuth capable API. Dashboards,
event histories, and emailed PDF summaries show who clicked, who reported, and who repeated mistakes. Service providers can isolate clients with multi tenancy, while MFA and single sign on protect the console.
Advanced red team features include reverse proxy and remote browser phishing, session capture to defeat weak MFA, content rewriting, page obfuscation, JA4 and geo based access rules, and device code phishing.
Learn more
Cyberly
Cyberly operates as a human-risk management platform focused on safeguarding organizations by tackling the human dimensions of cyber vulnerabilities. It equips employees with hands-on training through realistic scenarios, including phishing attempts and deep-fake challenges, which help them recognize warning signs such as verifying recruiter identities, scrutinizing unexpected software requests, and detecting social-engineering tactics. Moreover, the platform includes an innovative “AI teaching co-pilot” that actively involves teams in modern awareness training, steering clear of outdated, passive methods in favor of more engaging, scenario-based exercises. Through its simulations and analytical insights, Cyberly not only assists organizations in cultivating a stronger security culture but also significantly reduces the risks posed by human error while improving employee vigilance concerning threats like phishing, identity theft, and insider risks. Ultimately, this strategy fortifies the organization's defenses and empowers employees to take an active role in safeguarding security, leading to a more resilient workforce against evolving cyber threats. By fostering a culture of proactive security awareness, Cyberly helps ensure that every employee becomes an integral part of the organization's defense mechanisms.
Learn more
Screenshots and Video
Company Facts
Company Name:
TrustedSec
Date Founded:
2012
Company Location:
United States
Company Website:
www.trustedsec.com/tools/the-social-engineer-toolkit-set/
Product Details
Deployment
SaaS
Training Options
Documentation Hub
Webinars
Video Library
Support
Standard Support
Web-Based Support
Product Details
Target Company Sizes
Individual
1-10
11-50
51-200
201-500
501-1000
1001-5000
5001-10000
10001+
Target Organization Types
Mid Size Business
Small Business
Enterprise
Freelance
Nonprofit
Government
Startup
Supported Languages
English