The Social-Engineer Toolkit (SET)

The Social-Engineer Toolkit (SET) is an open-source Python framework from TrustedSec for authorized social-engineering assessments. It provides guided attack vectors to test user awareness and validate controls in consent-based red-team exercises. SET integrates with Apache and Metasploit and supports Python 3.11 through 3.13.

Security teams and penetration testers who need an open-source console-driven framework to run controlled social-engineering simulations in lab or scoped environments.

• +Provides guided attack vectors through an interactive console.
• +Integrates with Metasploit and Apache for extended testing workflows.
• +A TrustedSec project with a Kali Linux package (apt install set).

• +Intended only for authorized testing with explicit permission and an established scope.
• +Windows and macOS support is limited; primary use is on Linux or via WSL.
• +Some attack vectors, such as the Java applet attack, rely on older browser technologies that may not reflect current enterprise environments.

Measure how users respond to deceptive content in authorized, isolated tests and validate that endpoint, email, and browser controls block or alert on suspicious activity.