Author: D0up4
Project Type: Red Team Simulation / Educational
Last Updated: 06/2025
This is a lab-only phishing simulation toolkit designed to demonstrate how credential harvesting attacks may occur using social engineering and fake login pages. It includes a realistic-looking Microsoft-style login page built from scratch (no copyrighted code), a local Flask server to receive test credentials, and credential logging.
This project is intended for ethical red team development, security education, and security awareness training — strictly in controlled, private lab environments.
- ✅ Realistic Microsoft-style login UI (100% custom HTML/CSS)
- ✅ Flask-based backend server (
Python
) - ✅ Credential capture and timestamped logging
- ✅ Redirects to Microsoft’s real login page post-submit
- ✅ Safe for labs: no external delivery or malware involved
Login Page | Credential Log Output |
---|---|
![]() |
![]() |
- Python 3.x
- Flask
git clone https://github.com/D0up4/phishing-simulator.git
cd phishing-simulator
pip install -r requirements.txt
python server.py