Add success.html for phishing simulation results

rolling-code · web-flow · commit 5736198677e1 · 2025-12-02T16:14:33.000-05:00
diff --git a/docs/success.html b/docs/success.html
@@ -0,0 +1,38 @@
+
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <title>Security Awareness Simulation – Post Login</title>
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <style>
+    body { font-family: Segoe UI, Arial, sans-serif; background: #0F172A; color: #F9FAFB; margin: 0; }
+    .container { max-width: 800px; margin: 40px auto; background: #1E293B; padding: 30px; border-radius: 12px; box-shadow: 0 8px 24px rgba(0,0,0,0.4); }
+    h1 { color: #38BDF8; margin-bottom: 10px; }
+    p { line-height: 1.6; font-size: 18px; }
+    .alert { background: #F87171; color: #0F172A; padding: 12px; border-radius: 8px; font-weight: bold; margin: 20px 0; }
+    ul { margin-top: 10px; padding-left: 20px; }
+    li { margin-bottom: 8px; }
+    footer { text-align: center; font-size: 14px; color: #94A3B8; margin-top: 40px; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <h1>Simulation Complete</h1>
+    <div class="alert">⚠️ This was a phishing simulation – no credentials were captured.</div>
+    <p>You just interacted with a real Microsoft login page and almost approved an app request. Attackers use this exact technique to gain access to your data.</p>
+    <h2>What should you have noticed?</h2>
+    <ul>
+      <li>The app name was <strong>Microsoft Security Portal</strong> – sounds official but is not a verified Microsoft app.</li>
+      <li>The permissions requested included access to your profile and maintaining access to data.</li>
+      <li>Attackers rely on trust in familiar branding and URLs. The login page was real, but the app was not.</li>
+    </ul>
+    <h2>How to protect yourself:</h2>
+    <ul>
+      <li>Always check the <strong>app publisher</strong> and <strong>permissions</strong> before clicking “Accept.”</li>
+      <li>If unsure, cancel and report to IT Security.</li>
+    </ul>
+  </div>
+  <footer>© 2025 Security Awareness Program | Controlled simulation for training purposes.</footer>
+</body>
+</html>
