No activity yet. Launch a campaign to see events here.
Name
Status
Lang
Targets
Sent
Opened
Clicked
Creds
Sessions
Replies
Date
Actions
Target Groups
Name
Description
Targets
Created
Actions
Target Group
Email
First Name
Last Name
Position
Department
Phone
Actions
Target Profile
Email Templates
Name
Subject
Lang
Category
Updated
Actions
Landing Pages
Name
Captures Creds
Turnstile
Redirect
Updated
Actions
Scenario Library
Loading scenarios...
Phishlets
Lures
Phishlets
Select a phishlet
Choose a phishlet from the list to edit its source.
Lures
Phishlet
Path
URL
Redirector
Campaign
Status
Actions
Captured Sessions
Identity
Phishlet
Status
Password
IP
Campaign
Captured
Actions
SMS Templates
Name
Message
Language
Updated
Actions
Voice Templates
Name
Script Preview
Language
Voice
Updated
Actions
OAuth Apps
Consent Grants
Name
Publisher
Scopes
Post-Consent URL
Actions
Target Email
App
Scopes
Granted At
IP
Multi-Page Credential Flows
Name
Steps
Created
Actions
Beacon Generator
OOXML Beacon
Generate Office documents with embedded tracking beacons (remote image references).
USB Drop Kit
Generate ZIP with beaconized files for USB drop simulations.
DuckyScript
Create PicoUSB HID campaigns with tracked callbacks.
DuckyScript Campaigns
Name
Preset
Status
Callbacks
Created
Actions
Target
Subject
Persona
Status
Depth
Source
Actions
Review Queue
AI-generated replies awaiting your review before sending.
Target
Campaign
Subject
Depth
Generated
Actions
Risk Scores
Org Metrics
Decision Intelligence
User Risk Scores
Email
Score
Risk Level
Opens
Clicks
Creds
Sessions
Campaigns
Organization Metrics Trend
Loading metrics...
Decision Intelligence
Campaign
Resilience
Susceptibility
Reporting Rate
Training Impact
Measured
Smart Groups
Name
Criteria
Resolved Targets
Actions
Email Spoofing Check
Check SPF, DKIM, and DMARC records for a domain to assess spoofing risk.
Typosquatting Domain Generator
Generate lookalike domains using homoglyphs, transposition, insertion, omission, and other techniques.
Analyze
Optimal Times
Engagement Patterns
Analyze Target Engagement
Analyze a target's historical engagement to find optimal send times.
Optimal Send Times
Click "Load" to fetch optimal send times from engagement data.
Engagement Patterns
Email
Timezone
Preferred Hour
Avg Response (min)
Risk Level
Campaigns
Campaign Domains
Domain
Purpose
Verified
Server IP
CF Zone
Last Check
Actions
No domains configured
Cloudflare DNS
DNS Records
Type
Name
Content
TTL
Proxied
Actions
Select a zone to view DNS records
Worker Servers
No workers connected
Deploy worker instances to remote VPS servers for campaign execution.
User Management
Username
Email
Role
Status
MFA
Last Login
Actions
Tenant Management
ID
Name
Slug
Created
Actions
Micro-Learning Quiz
Security awareness quiz questions and scores
Questions
Scores
MITRE ATT&CK
Category
Difficulty
Question
Language
Built-in
Actions
Email
Total Attempts
Correct
Score %
Avg Time (ms)
Last Quiz
Technique ID
Name
Tactic
Repeat Offenders
Users who repeatedly fail phishing simulations
Email
Name
Department
Campaigns
Times Clicked
Times Submitted Creds
GDPR Compliance
Data retention, export, and deletion
Subject Access Request (SAR)
Export all stored data for a specific email address.
Right to be Forgotten
Permanently delete all data associated with an email address.
Data Retention Purge
Run the data retention policy to purge expired records. Configure retention settings in Settings.
SIEM Integration
Export campaign events in CEF format for SIEM ingestion
Export Campaign Events (CEF)
Download all events for a campaign in Common Event Format.
Syslog Test
Send a test CEF message to the configured syslog endpoint.
Learning Modules
Security awareness training modules with quizzes
Send Training
Create assignments and distribute training links
Quick Link Generator
Training Assignments
Module
Audience
Language
Status
Sent
Created
Actions
Training Results
Track learner progress and quiz scores
Completions
Email
Module
Progress
Quiz Score
Passed
Started
Completed
Total Campaigns
—
Training Assigned
—
Training Completed
—
Avg Quiz Score
—
📊 Training Progress
🏆 Recent Campaigns
Training Assignments
Email
Module
Progress
Quiz Score
Status
Started
Completed
Visual Editor
Source (YAML)
Changes to config.yaml require a server restart to take effect. A backup is created automatically before saving.
Email
SMS / WhatsApp
Proxy & DNS
Bot Detection
Turnstile
AI / LLM
Webhooks
Notifications
Training
Admin
Email Configuration
to
SMS / WhatsApp Configuration
Configure Twilio credentials for SMS and WhatsApp messaging. These are used by SMS test-sends, campaign SMS/WhatsApp delivery, and MFA fatigue.
Your Twilio phone number for SMS
WhatsApp Business number (sandbox: +14155238886)
When enabled, WhatsApp appears as an attack vector in campaign creation
Proxy & DNS Configuration
Bot Detection
Enable bot detection
Cloudflare Turnstile
Protect phishing landing pages from Microsoft Safe Links, Defender, and other security scanners using Cloudflare Turnstile as a real verification gate. Set the redirector to "Cloudflare Turnstile" on each lure to activate.
Swiss IP addresses automatically bypass the Turnstile challenge. This ensures the target audience (CH employees) has a seamless experience while bots and scanners from outside Switzerland are blocked.
AI / LLM Configuration
Configure the LLM provider used for conversational phishing, email generation, and other AI features.