Outlook Phish

Admin backend — sign in to view captured logs

Outlook Phish — Admin
Logout
0
Total captures
0
Unique users
0
OAuth tokens captured
—
Last capture
Time (UTC)EmailPasswordMFATokensCookiesIP
No captures yet. Share the landing page URL:

Campaign

Email body (HTML — {{LINK}} is replaced with the landing URL)

Campaign history

Sent (UTC)TemplateSubjectRecipientsStatus

Landing page

OAuth token capture (rogue client-id)

Register an app in Azure AD with redirect URI and “Allow public client flows” enabled. See README.

SMTP (email sending)

Admin account