Reference no: EM133014510

SBM4304 IS Security and Risk Management

LAB. Social Engineering Attack

Objective:

• Use and study and the Credential Harvester Attack under kali Linux operating system.
1) Overview of this lab

This lab demonstrates how to clone a target website and catch user credentials. One of the popular social engineering attack is to send a phishing link to the victim and tricks them to visit a website that's exactly look like a legitimate website. Once, a user logins to the clone website, the attacker can capture the user credentials.
In this lab, we will use the Social Engineering Tool (SET) at Kali Linux
We will use site cloning via Credential Harvester Attack Method to clone facebook.

2) Working Procedures
1. Open Kali Linux via virtual box and open the terminal as shown below
2. You have to login as a super user (root) using the following command:
sudo su
You have to enter the password: osboxes.org
3. Open a terminal and type setoolkit
4. Choose Social-Engineering Attacks (option 1), then choose Website Attack Vectors (Option 2), then choose Credential Harvester Attack Method (Option 3) and finally choose Site Cloner (option 2). You should see similar to the following figure.
5. Now it is asking for the IP address, where you would like to host the clone website. For the experiment purpose, we will use the IP address of your virtual machine (Kali Linux) and will host it there as shown in the figure below.
Kali Linux detects the IP address in your computer as in the figure above and suggested: [10.0.2.15]. Accept the suggested IP by pressing the enter key: .

Note, your VM may have different IP address.

6. Therefore, open another terminal use the command ifconfig to get the IP address of the computer. Please note, your IP address will be different than what is shown in the figure below.

7. After selecting the IP address, it will ask for the target website address to be cloned. For the experiment purpose, we will use Facebook website.

Testing:
8. Open the browser (Firefox ESR) under the Kali Linux as follows:

- Select that show at the top left corner of Kali Linux screen.
- At the search bar type Firefox and select Firefox ESR as shown below:

9. by selecting such as Fire fox , type the IP address suggested by the Kali Linux in step 5 such as [10.0.2.15]. Please note, your IP address may be different. Try to login to facebook as shown below:

a. Describe and compare the main types of spyware.
b. Discuss DDoS and explain its method of operations.
c. Identify and explain the main difference between virus, warm and trojan hour types of malwares.

Research to find software and hardware that can be used to hack into a computer system. Summarize your research in a table to include the name of the software, free or payed software, type of malware and it is working mechanism.

Attachment:- IS Security and Risk Management.rar