How mrz-crypto/password-caputur works
This is a local phishing-demo site whose main flow presents provider-styled login forms, records submitted credentials, and redirects to an index page. The repository also includes a separate form handler and capture page, plus an optional ngrok exposure path documented in the README. The sampled code shows file and PHP error-log writes; the index excerpt also contains guest-session and quiz/dashboard UI. The capture page’s own form wiring and the full index behavior are not established by the excerpts.
Main entry points: fake_github_login.php GitHub-style form and handler · fake_google_login.php Google-style form and handler · fake_microsoft_login.php Microsoft-style form and handler · login.php Form POST handler
Components 10
Login interfaces
- GitHub-style form and handler
fake_github_login.php - Google-style form and handler
fake_google_login.php - Microsoft-style form and handler
fake_microsoft_login.php - Index and guest UI
index.php - Capture form page
capture.html
Submission handling
- Form POST handler
login.php
Capture outputs
- Captured log
- PHP error output
Other components
- Visitor
- ngrok tunnel
Connections 16
- Visitor → GitHub-style form and handler: submits credentials
fake_github_login.php - Visitor → Google-style form and handler: submits credentials
fake_google_login.php - Visitor → Microsoft-style form and handler: submits credentials
fake_microsoft_login.php - GitHub-style form and handler → Captured log: appends entry
fake_github_login.php - Google-style form and handler → Captured log: appends entry
fake_google_login.php - Microsoft-style form and handler → Captured log: appends entry
fake_microsoft_login.php - GitHub-style form and handler → PHP error output: writes capture output
fake_github_login.php - Google-style form and handler → PHP error output: writes capture output
fake_google_login.php - Microsoft-style form and handler → PHP error output: writes capture output
fake_microsoft_login.php - GitHub-style form and handler → Index and guest UI: redirects after capture
fake_github_login.php - Google-style form and handler → Index and guest UI: redirects after capture
fake_google_login.php - Microsoft-style form and handler → Index and guest UI: redirects after capture
fake_microsoft_login.php - Form POST handler → Capture form page: redirects on GET or POST
login.php - Form POST handler → Captured log: appends entry
login.php - Form POST handler → PHP error output: writes capture output
login.php - ngrok tunnel → Visitor: exposes local site
README.md