Benjamin Shepherd ben-shepherd

How to Send Fake Credentials to a Fake Login Page (For Educational Purposes)

⚠️ Disclaimer: This is for educational and defensive security testing only (e.g., testing your own server). Never use it on systems you do not own or have explicit permission to test. Unauthorized use is illegal.

🧐 How to Determine Where Login Data Is Sent

When you submit a login form, your username and password are sent to a server endpoint using an HTTP request (usually POST).

	[
	{"name": "Afghanistan", "code": "AF"},
	{"name": "Åland Islands", "code": "AX"},
	{"name": "Albania", "code": "AL"},
	{"name": "Algeria", "code": "DZ"},
	{"name": "American Samoa", "code": "AS"},
	{"name": "AndorrA", "code": "AD"},
	{"name": "Angola", "code": "AO"},
	{"name": "Anguilla", "code": "AI"},
	{"name": "Antarctica", "code": "AQ"},

	[
	{
	"value": "Dateline Standard Time",
	"abbr": "DST",
	"offset": -12,
	"isdst": false,
	"text": "(UTC-12:00) International Date Line West",
	"utc": [
	"Etc/GMT+12"
	]

	{
	"ab": {"name": "Abkhaz", "nativeName": "аҧсуа"},
	"aa": {"name": "Afar", "nativeName": "Afaraf"},
	"af": {"name": "Afrikaans", "nativeName": "Afrikaans"},
	"ak": {"name": "Akan", "nativeName": "Akan"},
	"sq": {"name": "Albanian", "nativeName": "Shqip"},
	"am": {"name": "Amharic", "nativeName": "አማርኛ"},
	"ar": {"name": "Arabic", "nativeName": "العربية"},
	"an": {"name": "Aragonese", "nativeName": "Aragonés"},
	"hy": {"name": "Armenian", "nativeName": "Հայերեն"},