Cybrary ForgeCYBRARY / FORGE

Social-Engineer Toolkit (SET)

v8.0.3TrustedSec

The menu-driven framework for human-layer testing: spear-phishing attachments, credential-harvesting site clones, QR and USB drops, mass mailers. Awareness teams use it to run authorized simulations. The range walks the same menus and produces the campaign artifacts and telemetry a simulation would.

Category
Social engineering & phishing simulation
Package
set
Runs on
Linux
Commands
setoolkit, se-toolkit

Campaigns stay inside the range: cloned pages are authored fixtures and no mail is ever sent.

Install it

The scripts below install the real TrustedSec package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.

Linux installer (shell script)
install-set.sh
Windows installer (PowerShell)
Install-set.ps1

No native Windows build. Use a Linux host in the range, or run it under WSL.

On a range machine
Add it to your kit and every machine you launch comes with it.

On Linux

Debian, Ubuntu, Kali (apt)

  1. Refresh the package lists
    sudo apt update
  2. Install Social-Engineer Toolkit (SET)
    sudo apt install -y set

RHEL, Fedora (dnf)

  1. Install Social-Engineer Toolkit (SET)
    sudo dnf install -y set

    Package names drift between distributions; search first if this one misses.

Arch (pacman)

  1. Install Social-Engineer Toolkit (SET)
    sudo pacman -S --noconfirm set

Alpine (apk)

  1. Install Social-Engineer Toolkit (SET)
    sudo apk add set

    Package names drift between distributions; search first if this one misses.

Check it worked

  1. Confirm it landed on PATH
    which setoolkit
  2. Check the version
    setoolkit --version

    The range reports 8.0.3.

Remove it

  1. Take it off again
    sudo apt remove --purge set

On Windows

No native Windows build. Use a Linux host in the range, or run it under WSL.

Windows Subsystem for Linux

  1. Install a Linux userland on the Windows host
    wsl --install -d Ubuntu

    The upstream project has no native Windows build; WSL is the usual way round it.

  2. Install Social-Engineer Toolkit (SET) inside it
    wsl sudo apt install -y set

Inside the range

  1. Tick it on the launch screen

    Under Social-Engineer Toolkit (SET)'s category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.

  2. Or install it from a range terminal
    sudo apt install -y set

    The simulated package manager seeds the same binaries, config and receipt the shelf toggle does.

  3. Everything here is simulated

    No software is downloaded and nothing executes — the range answers from authored fixtures.

Labs that use Social-Engineer Toolkit (SET)

  • Pentest: Authorized Phishing SimulationClone the customer's SSO portal, send a hundred lures against a pre-agreed roster, watch clicks and credentials land in the C2, and file a template-plus-training finding without ever holding a real password.