Is it legal or illegal to use the cloning site option within the social engineer toolkit (SET) or any other tool that clones websites? I was under the impression that if performing a social engineer exercise with a signed document from a client, I would be legally allowed to clone their site (with their approval), but what if I wanted to clone a site such as Microsoft or Google for the test? Would Microsoft or Google or whoever have the authority to sue me for something, such as copyright infringement?
I am not a lawyer, but I would be very careful about cloning as there are some major issues you should think about:
Also, if you place your cloned site on the Internet you may fall foul of various laws on misrepresentation, and as you can't limit who may try to access the site, you should be aware of international laws in this area.
What is it you are trying to do that requires a clone of the site? In many years of managing social engineering engagements I have never needed to use this technique as there should be easier ways to get access or information.