Automate spear-phishing, credential harvesting, and payload delivery for penetration testing.
npx skills add https://github.com/AeonDave/malskill --skill set
Please help me install this Agent Skill. Skill: set Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/social-engineering/set Command: npx skills add https://github.com/AeonDave/malskill --skill set
This Skill automates complex social engineering tasks, streamlining phishing campaigns, credential harvesting, and payload delivery.
Use the set skill to clone the website https://example.com and capture credentials.
High-intent search queries and answers about installing and using this skill.
You can automate phishing campaigns and credential harvesting by using this Skill to clone legitimate websites and capture user credentials entered on the cloned login pages. It streamlines social engineering attacks for security awareness training.
Yes, you can clone a website to capture user credentials. The Skill automates website cloning to harvest credentials, allowing you to simulate real-world attack vectors and test your organization's security posture.
You can automate payload delivery by using the spear-phishing feature to create and send targeted emails containing malicious payloads. This simulates real-world attack vectors for penetration testing purposes.
Yes, you need Python 3 and specific system configurations to run this social engineering automation. The Skill requires this environment to properly execute spear-phishing, credential harvesting, and payload delivery tasks.
The best way to simulate social engineering attacks is to automate spear-phishing, website cloning for credential harvesting, and payload delivery. This allows you to test employee responses to real-world attack vectors effectively.
Limitations include requiring specific system configurations and Python 3 to execute the automated website cloning and credential harvesting. You must ensure your environment matches these prerequisites before running the social engineering simulations.
CAPHTECHDesign evaluation tests probing failure modes in LLM-based systems.
dapperdiversTest POST parameters for SQL injection, XSS, and command injection vulnerabilities.
valITinoAutomate network infrastructure assessments for authorized pentests.
zebbernGuide phishing attack simulations using Shellphish and Wifiphisher for penetration testing.
