Simulation and red team Phishing Framework
AiTM phishing case study — MFA bypass demonstration (academic red team exercise, ESME Sudria 2025–2026)
Phishing triage analysis of a real Sneaky2FA AiTM campaign targeting Microsoft 365. Documents the full attack chain, IOC extraction, evasion techniques, and sandbox vs reputation tool detection gap.
Docker-based AiTM lab for QR login workflows — reverse proxy, browser storage capture, and session replay. Educational use only.
Detection pipeline for AiTM/credential abuse in Azure Identity Protection — identifies axios user agent as a high-confidence IoC, enriches with AbuseIPDB, and automates alerting and response.
Add a description, image, and links to the aitm topic page so that developers can more easily learn about it.
To associate your repository with the aitm topic, visit your repo's landing page and select "manage topics."