QRCode attack vector

In this recipe, we will generate a QRCode for a site that we own, to harvest credentials. This can be sent through various means such as email, Facebook, twitter post, or even by using it as part of a flyer that you leave on target vehicles. We will send this QRCode to our target.

Getting ready

Let's ensure the following prerequisites:

• Kali Linux is running, and you are logged in as root

How to do it...

We will create a QRCode which redirect to a website:

1. From the Applications menu, select Social Engineering Tools | SET Social Engineering Toolkit. You will be presented with the following screen:

Initial set toolkit screen

2. Select the top option 1) Social-Engineering Attacks.
3. Select 8) QRCode Generator Attack Vector.
4. Enter the malicious URL; for our test purposes, we will simply enter www.packtpub.com.
5. It will generate the image file and provide the location.
6. Open the image file on your Kali VM, like so: 

Generated QRCode

7. Most phones will scan this image and take you to the website...