A controlled phishing simulation for educational cybersecurity purposes.
This project demonstrates common phishing attack techniques and web application vulnerabilities including SQL injection and credential harvesting. It's designed for cybersecurity learning and security awareness training.
- Fake login page simulation
- Credential harvesting mechanism
- SQL injection vulnerability examples
- Database integration for learning
- PHP 7.4+
- MySQL/MariaDB
- Web browser
Use environment variables to configure the database connection. See .env.example for reference.
Set ALLOW_RUN=1 to enable execution in your local environment.
- 🚫 FOR EDUCATIONAL USE ONLY
- 🚫 NEVER DEPLOY PUBLICLY
- 🚫 USE IN ISOLATED ENVIRONMENTS ONLY