(untitled)

In the light of the recent Pegasus media scare, let's talk about modern phishing/smishing techniques. Smishing is particularly interesting to me, since Pegasus was probably partially spread by it.

What the fuarrrk is smishing?

>>16692 i cba to google but if i remember right its phishing via text messages

>>16691 Try putting a little effort into your posts next time?

gophish/evilnginx/SocialEngineeringToolkit has anyone actually made any plugins for SET?

>>16719 set is deprecated, dont use it gophish is just web app that automates campaigns (and inserts tags to delegate it as a phishing exercise) evilginx is good but its a pita to setup the tooling the best phishing tool is rolling your own and do osint-target your victims in small batches and rotate lots of modern defenses are comically easy to bypass, save for low threshhold alerting and costly COTS products (like cofense, which is sort of scammy except for their plugins) nobody responds to smishing, its a dead meme vishing is good if youre smart and slick but if you're a dolt who cant think on your feet do try it tl;dr, roll your own, people still run macros or install extensons

>>16701 >critiques low effort OP with low effort whinepost >>16725 GoPhish looks cool, never got to use it before I switched to SDE sadly. Before I just rolled my own with jinja templating (for the emails, kinda overkill but w/e), a nice smtp relay, and flask with a cloned site. >evilginx is good but its a pita to setup the tooling absolutely agreed, really awesome suite but absolute pain to set up well >nobody responds to smishing, its a dead meme My experience has been the polar opposite. Maybe I have exceptionally stupid clients, but docusign or mfa scenarios have been wildly more successful than via email. It's so so so stupidly easy to do, too. Granted smishing would not be my go-to for SE, but it's definitely not last on my list either.

>>16701 You need to go back to /g/

>>16862 /g/ doesn't have effortposts, unlike this board too bad two thirds of /sec/ is just noobs blogposting, asking stupid questions, political soykaf yada yada yada

>>16862 No, I agree. The opening post is two sentences, no information, and an irrelevant cartoon character. If someone makes a decent thread, I'll lock all others.

>>16725 >nobody responds to smishing, its a dead meme untrue

>>16866 >too bad two thirds of /sec/ is just noobs blogposting, asking stupid questions, political soykaf yada yada yada no fuarrrking joke, no one wants to even try to improve. >sage for offtopic