Social engineering stands as one of the most prevalent forms of malicious attacks worldwide, leading to the compromise of sensitive information from organizations and individuals alike. Various forms of social engineering attacks exist, and with advancements in technology and in attackers’ skills, detecting these attacks becomes increasingly challenging. This research introduces a pen-testing tool, named ZetaXE, designed to support the successful implementation of Social Engineering Tactics on smartphones, tablets, and IoT devices. The tool utilizes Streamlit as a UI framework and the SQLite Python package as a database to facilitate the secure storage of private information. The paper includes scenarios showcasing the quid pro quo attack, reverse social engineering attack, as well as phishing and smishing attacks.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Unmasking ZetaXE: A Tool to Successfully Implement Social Engineering Attacks

  • Daryan J. Karimzadeh,
  • Tamirat T. Abegaz,
  • Bryson R. Payne

摘要

Social engineering stands as one of the most prevalent forms of malicious attacks worldwide, leading to the compromise of sensitive information from organizations and individuals alike. Various forms of social engineering attacks exist, and with advancements in technology and in attackers’ skills, detecting these attacks becomes increasingly challenging. This research introduces a pen-testing tool, named ZetaXE, designed to support the successful implementation of Social Engineering Tactics on smartphones, tablets, and IoT devices. The tool utilizes Streamlit as a UI framework and the SQLite Python package as a database to facilitate the secure storage of private information. The paper includes scenarios showcasing the quid pro quo attack, reverse social engineering attack, as well as phishing and smishing attacks.