Install · Usage · Features · Screenshots · FAQ · Contributing

PocketSET provides a beginner-friendly terminal user interface for SET. No flags, no syntax, just guided menus and forms.

The Social-Engineer Toolkit (SET) is a penetration testing framework for AUTHORIZED security assessments ONLY.

By using PocketSET you agree that:

• You have explicit written permission to test the target systems, networks, and/or personnel
• You will not use SET for any illegal or unauthorized purpose
• You accept full responsibility for any consequences arising from your use of this tool
• You comply with all applicable local, state, federal, and international laws

Unauthorized use is a criminal offence.

bash -c "$(curl -fsSL https://raw.githubusercontent.com/highoncomputers/PocketSET/main/install.sh)"
source ~/.bashrc
pocketset

sudo bash -c "$(curl -fsSL https://raw.githubusercontent.com/highoncomputers/PocketSET/main/install.sh)"
pocketset

bash -c "$(curl -fsSL https://raw.githubusercontent.com/highoncomputers/PocketSET/main/install.sh)"
pocketset

The installer auto-detects your platform and asks for confirmation. It installs SET, Metasploit, and all Python dependencies automatically.

git clone https://github.com/highoncomputers/PocketSET.git && cd PocketSET
bash install.sh
pocketset

pocketset

Demo screenshots and GIFs coming soon. The TUI interface features a rich terminal dashboard with real-time output streaming and highlight detection.

• Dual-platform: Auto-detects Termux (Android) vs Kali vs Other Linux, adjusts paths + deps
• Schema-driven wizards: Parameter collection driven by schema.json — easy to extend
• Input history: Frequently entered values (IPs, ports, URLs) remembered across sessions
• Attack presets: Save/load attack configurations as JSON files
• Attack history: Every run logged with timestamp, params, and success status
• Live output streaming: Watch SET execute in real-time with syntax-highlighted output
• Smart filtering: Deduplicates repetitive SET output, highlights key events
• Pre-flight checks: Optional ping/port checks before launching attacks
• Auto-update: Checks GitHub for new PocketSET versions on startup
• Report generation: Save attack output as HTML reports
• Plugin system: Extend with custom JSON-defined scripts
• Batch mode: Run same attack against multiple targets from a file
• Full input validation: IP, port, URL, email, CIDR, hostname, file paths
• Error handling: Every error caught, logged, displayed clearly
• Process cleanup: try/finally on all subprocesses + pexpect, no orphans
• Pexpect fallback: Graceful degradation when pexpect is unavailable

Pre-built attack configurations in ~/.pocketset/presets/:

• Clone Login Page — spear-phish with cloned login + attachment
• Rogue AP — wireless credential harvesting with DNS spoofing
• Teensy USB — PowerShell reverse shell via USB HID
• MSSQL Brute — CIDR scan + SA account brute force
• QR Code — malicious URL QR code generator

~/.pocketset/
├── config.json              # Platform config
├── disclaimer_accepted      # Legal acceptance marker
├── input_history.json       # Input history (IPs, URLs, etc.)
├── history.jsonl            # Attack execution history
├── logs/                    # Error + debug logs
│   └── pocketset.log
├── presets/                 # Saved attack configurations
├── plugins/                 # Custom plugin JSON files
├── reports/                 # HTML attack reports
└── temp/                    # Temporary automate scripts

Drop a .json file into ~/.pocketset/plugins/:

{
  "name": "My Custom Exploit",
  "description": "Runs a custom Python script",
  "params": [
    {"key": "target", "label": "Target IP", "default": ""}
  ],
  "script_path": "/home/user/my_exploit.py",
  "timeout": 300
}

~/.pocketset/config.json controls behavior:

{
  "platform": "auto",
  "theme": {
    "header": "bold cyan",
    "success": "bold green",
    "error": "bold red",
    "warning": "bold yellow",
    "info": "white",
    "muted": "dim white"
  },
  "pexpect_delay": 0.3,
  "timeout_seconds": 600,
  "pre_flight_ping": true,
  "auto_update": true
}

• GitHub: https://github.com/highoncomputers/PocketSET
• Original SET: https://github.com/trustedsec/social-engineer-toolkit

• SET Author: David Kennedy (ReL1K) / TrustedSec
• PocketSET: Interactive TUI wrapper for simplified SET usage

Hack the Gibson...and remember...hugs are worth more than hands. Also read CONTRIBUTING.md and SECURITY.md before opening issues.