Skip to main content
PPPhishPondPhishing Tradecraft Intelligence

Attack · Detection · Validation

CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe
CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe

Research Desk

PhishPond

Phishing tradecraft research desk covering campaign analysis, adversary infrastructure, detection engineering, and validation workflows.

High signal for security teams who need tradecraft, not recycled filler.

Navigate

  • Home
  • Newsroom
  • Research
  • Subscribe

Signals

  • editorial@phishpond.dev
  • Research Mission & Ethics
  • Intel Brief
  • RSS Feed
  • Submit Research Tip
© 2026 PhishPond. Authorized security research use only.

GitHub RadarRed team tool

SagarBiswas-MultiHAT/Fake_FACEBOOK_Login_Page

An educational phishing simulation login page demonstrating how fake UIs capture user credentials. It logs inputs, stores them locally, and emails the captured data for awareness training. Intended strictly for controlled, ethical use to teach URL verification and phishing prevention. Primary language: CSS. 30 stars.

CSS30 stars1 forkspushed Aug 31, 2026

Project links:Open GitHub projectBack to radar

README Preview

Fetched from GitHub

Fake Login Page (Phishing Simulation for Education Only)

Watch Live: https://www-faceb0ok-com.netlify.app/ <br>

-- Login PAGE <br></br> Image: README asset <br></br>

-- Received Email <br></br> Image: README asset <br></br>

Overview

This project is a fake login page designed for educational purposes only. It demonstrates how phishing attacks can be carried out to raise awareness about cybersecurity risks. The project is intended to educate users about the importance of verifying URLs and recognizing social engineering tactics.

⚠️ Important: This project must never be used maliciously or deployed publicly. It is strictly for ethical and controlled environments.

---

Features

  • Realistic UI: Mimics the Facebook login page to demonstrate phishing techniques.
  • Data Capture: Captures email/phone and password inputs.
  • Email Notification: Sends captured data to a specified email address for educational purposes.
  • Local Storage: Stores the captured data locally for demonstration.
  • Disclaimer: Includes a visible disclaimer to emphasize ethical use.

---

File Structure

    Fake_FACEBOOK_Login_Page--Phishing_Simulation_for_Education_Only/
        index.html       # Main HTML file for the fake login page
        script.js        # JavaScript for handling form submission and data capture
        css/
            styles.css   # CSS for styling the login page
        images/
            fb.ico       # Favicon for the page
            logo.png     # Facebook logo for the page

---

How It Works

  1. User Interaction:
  • The user enters their email/phone and password into the login form.
  • Upon submission, the data is captured.
  1. Data Handling:
  • The data is logged to the browser console.
  • The data is saved to the browser's local storage.
  • The data is sent to the specified email address (sagarbiswas@multihat.dev) using FormSubmit's API.
  1. Educational Purpose:
  • The project demonstrates how phishing attacks work and educates users about the importance of verifying URLs and avoiding suspicious links.

---

Setup Instructions

  1. Clone or download the project.
  2. Open the index.html file in a browser.
  3. Interact with the login form to see how data is captured and handled.

---

Disclaimer

This project is for educational purposes only. It must not be used for malicious purposes or deployed publicly. Always use it in a controlled environment to educate others about phishing risks and cybersecurity awareness.

---

Concepts Learned

  • Social engineering techniques
  • UI deception
  • Importance of URL verification
  • Ethical hacking and cybersecurity awareness

---

Author

  • Sagar
  • Email: sagarbiswas@multihat.dev