Phishing Lab — Home

Home Fake Google Fake Bank Fake Microsoft Harvested Creds Email Template

Phishing Attack Techniques

🔵 Fake Google Login

Credential harvesting page cloning Google's login UI

🟦 Fake Microsoft Login

Microsoft account phishing clone — common corporate attack

🏦 Fake Bank Login

Banking phishing page — harvests account credentials

📋 Harvested Credentials

View all credentials submitted to phishing pages this session

What to Practice Here

Identify what makes a login page look legitimate vs fake
Submit credentials and watch them appear in /harvested (attacker's view)
Use Burp Suite to intercept the POST request and see the stolen data
In a real attack: the attacker sends a link to this page via email
Use the email template generator to see how phishing emails are crafted