Live Feed
Captures
Config
Preview
event stream
— waiting for session activity —
active sessions
claim to control
waiting for victims…
victim screen
waiting for victim
actions
victim requested resend — send new number
jump to page
push victim anywhere
challenge number for MFA Number jump
type any 2-digit number
captured
email
—
password
—
mfa number
—
procedure
01 · send victim url
02 · wait → email capture
03 · accept → password screen
04 · select mfa type
05 · accept → mfa challenge
06 · verify number matches
07 · accept → review screen
08 · victim resolves cards
09 · reveal training overlay
02 · wait → email capture
03 · accept → password screen
04 · select mfa type
05 · accept → mfa challenge
06 · verify number matches
07 · accept → review screen
08 · victim resolves cards
09 · reveal training overlay
capture log
— no captures yet —
summary
email
—
password
—
mfa
—
Telegram Notifications
Send captured credentials to a Telegram bot in real time. Each capture (email, password, MFA) fires a separate message.
From @BotFather → /newbot → token
Your personal chat ID or a group/channel ID. Message @userinfobot to get yours.
not configured
Worker Endpoint
Cloudflare Worker relay URL. Changes take effect immediately.
Page URLs
Used for preview iframes and quick-copy sharing.
sim page previews
live iframes — requires victim URL set in Config
Email Screen
Password Screen
MFA — Number Challenge
MFA — Email Code
MFA — Authenticator
MFA — Backup Code
Account Protected
Review Changes
Account Compromised