Phishing for Passwords! (Advent of Cyber Day 02)

Phishing for Passwords! (Advent of Cyber Day 02)

🎙 John Hammond 👥 2.2M 📅 December 2, 2025 ⏱ 19 min 👁 59K 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

phishingsocial engineeringcredential harvestingSETTryHackMe

Summary

In this video, John Hammond walks through Day 2 of the TryHackMe Advent of Cyber 2025 challenge, focusing on phishing. He explains social engineering concepts, including phishing, smishing, vishing, and quishing, and emphasizes the importance of awareness. The main task involves setting up a fake login page using a provided server.py script and then using the Social Engineering Toolkit (SET) to send a phishing email to a target user. He demonstrates how to configure the email, including the sender address, subject, and body, and then shows how the credentials are captured when the victim enters them. After obtaining the credentials, he logs into the victim’s mailbox and finds a secret message with a number that is the answer to the challenge. The video is educational, showing how easy it is to conduct a phishing attack and the importance of cybersecurity awareness.

141 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable practical knowledge on phishing and social engineering, demonstrating the use of the Social Engineering Toolkit in a controlled environment. The argumentation is clear and logical, with step-by-step instructions that are easy to follow. The creator emphasizes the ethical context of penetration testing and the importance of awareness. The demonstration is effective in showing how phishing attacks work and how to defend against them.

Scientific Rigor, Source Quality, Title Accuracy

The video is based on a TryHackMe room, which is a reputable platform for cybersecurity education. The creator mentions the Social Engineering Toolkit by Dave Kennedy and provides links to additional resources in the description. The title accurately reflects the content. The video is well-structured and the information is presented accurately. The sources cited are relevant and credible.

140 words

Title / Content Match

The title accurately reflects the content, which focuses on phishing for passwords using the Social Engineering Toolkit.

Quality & Reliability

8/10

The video is a practical walkthrough of a phishing attack using the Social Engineering Toolkit, based on a TryHackMe room. The content is accurate and well-explained, with clear steps and real-world context. The creator is experienced and provides additional resources. However, it is a tutorial and not a scientific study, and some aspects are simplified for educational purposes.

Key Moments

Cited Sources

  • Advent of Cyber 2025 — The TryHackMe event this video is part of.
  • Just Hacking Training — Training platform by John Hammond.
  • Newsletter — John Hammond's newsletter.
  • CodeCrafters — Affiliate link for learning to code.
  • OpenVPN — Affiliate link for VPN service.
  • CyberDefenders — Affiliate link for blue team training.

Concurring Sources

  • TryHackMe Advent of Cyber — The official TryHackMe room for the event.

Contribution & Novelties

The video provides a practical, hands-on demonstration of a phishing attack using the Social Engineering Toolkit, which is valuable for beginners in cybersecurity. It shows the entire process from setting up a fake login page to sending a phishing email and capturing credentials. The video also emphasizes the importance of awareness and provides tips for recognizing phishing attempts.

Pour aller plus loin :

92 words

Radar Profile

The radar chart shows high scores in information quantity and quality, with a moderate technical level. This indicates a well-balanced tutorial that is informative and reliable, though not highly technical. The overall profile suggests a solid educational resource for beginners.

Reliability 8/10

💬 No comments were provided for analysis.