Social-Engineering Toolkit(SET) 是一个由 David Kennedy (ReL1K)设计的社会工程学工具，该工具集成了多个有用的社会工程学攻击工具在一个统一的简单界面上。SET的主要目的是对多个社会工程攻击工具实现自动化和改良。作为一个渗透测试人员，社会工具是一个有效的攻击手段，但实际上并没有多少人使用它。目前SET更新至2.4.2版,新版主要改变如下:
    * Fixed a bug in multiattack vector where specifying java applet attack and shellcode exec would not properly inject alphanumeric shellcode into applet properly
    * Restructured multiattack vector to properly clone, prep payload delivery, then inject alphanumeric shellcode
    * Added better handling around multiple attack vectors
    * Fixed a bug that caused msfvenom to bomb out if path was /opt/framework3/msf3 versus /opt/framework/msf3
    * Added better handling around multiattack in Social Engineer Toolkit
    * Fixed a bug with self signed certificates would continue to show Microsoft versus what you sign it with
    * Changed java applet to load and render at bottom of body versus in head. Page should now load with Java Applet appearing
    * Fixed a bug where Java Repeater would not load properly when executed due to a incorrect loop within cloner.py
    * Added the ability to use filename for import versus directory
    * Added the ability to import index.html files versus just the folder on the custom import feature
工具下载:http://www.secmaniac.com/files/set.tar.gz