Ataque SMS Spoofing

De www.metasploit-es.com.ar

Vector de Ataque SMS Spoofing

Como pequeña observacion, comentar que este modulo es solamente el principio de una nueva plataforma de ataque movil para las nuevas versiones de SET. Los chicos de TB-Security.com introdujeron el modulo SMS spoofing. Este modulo te permitira falsear tu numero de telefono y enviar un SMS. Esto seria beneficioso en ataques de ingenieria social utilizando el Cosechador de Credenciales. Hay mas ataques en preparacion.

1.  Spear-Phishing Attack Vectors
2.  Website Attack Vectors
3.  Infectious Media Generator
4.  Create a Payload and Listener
5.  Mass Mailer Attack
6.  Teensy USB HID Attack Vector
7.  SMS Spoofing Attack Vector
8.  Third Party Modules
9.  Update the Metasploit Framework
10. Update the Social-Engineer Toolkit
11. Help, Credits, and About
12. Exit the Social-Engineer Toolkit

Enter your choice: 7

Welcome to the SET SMS Spoofing Attack method. This module allows you
to specially craft SMS messages and send them to a person. You can spoof
the SMS source.

This module was created by the team at TB-Security.com.

You can use a predefined template, create your own template or specify
an arbitrary message. The main method for this would be to get a user to
click or coax them on a link in their browser and steal credentials or perform
other attack vectors.

1. Perform a SMS Spoofing Attack
2. Create a Social-Engineering Template
3. Return to Main Menu

Enter your choice: 1

SMS Attack Menu

There are diferent attacks you can launch in the context of SMS spoofing,
select your own.

What do you want to do:

1. SMS Attack Single Phone Number
2. SMS Attack Mass SMS
3. Return to SMS Spoofing Menu

Enter your choice: 1

Single SMS Attack

Enter who you want to send sms to: 5555555555

Do you want to use a predefined template or craft
a one time SMS.

1. Pre-Defined Template
2. One-Time Use SMS
3. Cancel and return to SMS Spoofing Menu

Enter your choice: 1
Below is a list of available templates:

1: MRW: pedido no entregado
2: Boss Fake
3: Movistar: publicidad nokia gratis
4: Movistar: publicidad tarifa llamada
5: TMB: temps espera
6: Movistar: publicidad ROCKRIO
7: Movistar: publicidad verano internet
8: Vodafone Fool
9: Police Fake
10: Movistar: publicidad navidad
11: Yavoy: regalo yavoy
12: Movistar: oferta otoño
13: Movistar: publicidad tarifa sms
14: teabla: moviles gratis
15: Movistar: publicidad aramon
16: Movistar: publicidad nieve
17: Vodafone: publicidad nuevo contrato
18: ruralvia: confirmacion de transferencia
19: Ministerio vivienda: incidencia pago
20: Tu Banco: visa disponible en oficina

Enter the number you want to use: 2

Service Selection

There are diferent services you can use for the SMS spoofing, select
your own.

What do you want to do:

1. SohoOS (buggy)
2. Lleida.net (pay)
3. SMSGANG (pay)
4. Android Emulator (need to install Android Emulator)
5. Cancel and return to SMS Spoofing Menu

Enter your choice: 1

SMS sent

SET has completed.

• Ataque Teensy USB HID
• Automatizacion SET

Original de www.offensive-security.com
Traducido por cbk999