Live Attack Demonstrations

Demo 01

Credential Phishing

Google Workspace sign-in clone. Captures entered credentials and displays them in the terminal.

Web Social Engineering

Demo 02

Browser-in-the-Browser

Fake Google Drive shared file triggers a spoofed sign-in popup with a fake accounts.google.com URL bar.

Web Social Engineering

Demo 03

Fake CAPTCHA (ClickFix)

Firmware download page with Cloudflare verification that copies a PowerShell command to the clipboard.

Web Malware Delivery

Demo 04

Malicious Document Macro

Real .docm Word document with an AutoOpen VBA macro. Download and open in Word to demonstrate.

Malware Email

Demo 05

JumpCloud SSO Phishing

Fake JumpCloud SSO login portal for ideaForge. Captures credentials via the organization's identity provider clone.

Web Social Engineering

Demo 06

Email Header Spoofing

Sends a realistic Google security alert from a spoofed address. Configure SMTP via .env and send live.

Email Social Engineering

Demo 07

GoPhish Campaign

Full phishing campaign framework. Send emails, host landing pages, track clicks and credential submissions.

Email Web