Social-Engineer Toolkit (SET)
v8.0.3TrustedSecThe menu-driven framework for human-layer testing: spear-phishing attachments, credential-harvesting site clones, QR and USB drops, mass mailers. Awareness teams use it to run authorized simulations. The range walks the same menus and produces the campaign artifacts and telemetry a simulation would.
- Category
- Social engineering & phishing simulation
- Package
- set
- Runs on
- Linux
- Commands
- setoolkit, se-toolkit
Campaigns stay inside the range: cloned pages are authored fixtures and no mail is ever sent.
Install it
The scripts below install the real TrustedSec package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.
No native Windows build. Use a Linux host in the range, or run it under WSL.
On Linux
Debian, Ubuntu, Kali (apt)
- Refresh the package lists
sudo apt update - Install Social-Engineer Toolkit (SET)
sudo apt install -y set
RHEL, Fedora (dnf)
- Install Social-Engineer Toolkit (SET)
sudo dnf install -y setPackage names drift between distributions; search first if this one misses.
Arch (pacman)
- Install Social-Engineer Toolkit (SET)
sudo pacman -S --noconfirm set
Alpine (apk)
- Install Social-Engineer Toolkit (SET)
sudo apk add setPackage names drift between distributions; search first if this one misses.
Check it worked
- Confirm it landed on PATH
which setoolkit - Check the version
setoolkit --versionThe range reports 8.0.3.
Remove it
- Take it off again
sudo apt remove --purge set
On Windows
No native Windows build. Use a Linux host in the range, or run it under WSL.
Windows Subsystem for Linux
- Install a Linux userland on the Windows host
wsl --install -d UbuntuThe upstream project has no native Windows build; WSL is the usual way round it.
- Install Social-Engineer Toolkit (SET) inside it
wsl sudo apt install -y set
Inside the range
- Tick it on the launch screen
Under Social-Engineer Toolkit (SET)'s category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.
- Or install it from a range terminal
sudo apt install -y setThe simulated package manager seeds the same binaries, config and receipt the shelf toggle does.
- Everything here is simulated
No software is downloaded and nothing executes — the range answers from authored fixtures.
Labs that use Social-Engineer Toolkit (SET)
- Pentest: Authorized Phishing SimulationClone the customer's SSO portal, send a hundred lures against a pre-agreed roster, watch clicks and credentials land in the C2, and file a template-plus-training finding without ever holding a real password.