Use — Setool2 Cracked

$ cd /opt/setool2 $ sudo ./setool2 You are presented with the classic SET menu:

After selecting it, the next screen asks for the : Use Setool2 Cracked

Your flag is: FLAGSET0ol2_5uCce55fu1_Ph1sh1ng If the flag is not displayed in the browser, Setool2 usually prints the to the console when a credential is captured. In our run: $ cd /opt/setool2 $ sudo

[+] Enter the port to use for the clone [80] : 8081 Now SET builds the clone and starts a (or php -S ) behind the scenes. It also prints the URL where the fake site is reachable, e.g.: It works exactly like the official SET, so

The provided Setool2 binary is a version that runs without the usual license check. It works exactly like the official SET, so the normal workflow applies. 2. Initial Recon $ nmap -sV -p- 10.10.10.10 PORT STATE SERVICE VERSION 8080/tcp open http Apache httpd 2.4.41 ((Unix)) Visiting http://10.10.10.10:8080/ in a browser reveals a simple login page:

Now we simply (they don’t need to be correct) and click Login . The clone forwards the POST request to the original server and logs the data locally. 7. Capturing the Credentials Setool2 stores harvested credentials in a file under its working directory, usually: