Using SET for client-side exploitation