Social Engineering

A curated list of awesome social engineering resources.

Submitted by dbltap441, , Thread ID: 44774

Thread Closed
20-08-2017, 09:29 PM
#1
As a social engineer you have to understand human psychology, so the more you know about psychology, the better.

Social Engeneeringwill highlight the most interesting experiments within the field of psychology, discussing the implications of those studies for our understanding of the human mind and human behavior.

You will explore the psychology of our everyday thinking: why people believe weird things, how we form and change our opinions, why our expectations skew our judgments, and how we can make better decisions, so you and me can a become better social engineers!

Resources

Tools


  • XRay- XRay is a tool for recon, mapping and OSINT gathering from public networks.

  • Intel Techniques Online Tools- Use the links to the left to access all of the custom search tools.

  • Buscador- A Linux Virtual Machine that is pre-configured for online investigators

  • Maltego- Proprietary software for open source intelligence and forensics, from Paterva.

  • theHarvester- E-mail, subdomain and people names harvester

  • creepy- A geolocation OSINT tool

  • exiftool.rb- A ruby wrapper of the exiftool, a open-source tool used to extract metadata from files.

  • metagoofil- Metadata harvester

  • Google Hacking Database- a database of Google dorks; can be used for recon

  • Google-dorks- Common google dorks and others you prolly don't know

  • GooDork- Command line go0gle dorking tool

  • dork-cli- Command-line Google dork tool.

  • Shodan- Shodan is the world's first search engine for Internet-connected devices

  • recon-ng- A full-featured Web Reconnaissance framework written in Python

  • github-dorks- CLI tool to scan github repos/organizations for potential sensitive information leak

  • vcsmap- A plugin-based tool to scan public version control systems for sensitive information

  • Spiderfoot- multi-source OSINT automation tool with a Web UI and report visualizations

  • DataSploit- OSINT visualizer utilizing Shodan, Censys, Clearbit, EmailHunter, FullContact, and Zoomeye behind the scenes.

  • snitch- information gathering via dorks

  • Geotweet_GUI- Track geographical locations of tweets and then export to google maps.

Phishing tools


  • Gophich- Open-Source Phishing Framework

  • King Phisher- Phishing campaign toolkit used for creating and managing multiple simultaneous phishing attacks with custom email and server content.

  • wifiphisher- Automated phishing attacks against Wi-Fi networks

  • PhishingFrenzy- Phishing Frenzy is an Open Source Ruby on Rails application that is leveraged by penetration testers to manage email phishing campaigns.

  • Evilginx- MITM attack framework used for phishing credentials and session cookies from any Web service

  • Lucy Phishing Server- (commercial) tool to perform security awareness trainings for employees including custom phishing campaigns, malware attacks etc. Includes many useful attack templates as well as training materials to raise security awareness.
---------------
I hope this is a good contribution for this forum as my first addition!!!

Users browsing this thread: 2 Guest(s)