See how the attacks work — safely
Interactive, in-browser demos built for a high school cybersecurity pathway. Each one shows a real attack technique or security concept running live, so you can watch it happen instead of just reading about it.
Everything here is sandboxed. These demos only ever read input from
the form on their own page using normal JavaScript event listeners. Nothing is sent to
a server, stored, or capable of reading anything outside the browser tab. The
“attacker” and “exfiltration” panels are simulated for teaching purposes.
🔐 Keylogger
Type into a fake login form and watch a simulated attacker panel capture every keystroke — including the password field — in real time.
🔑 Password Strength
See entropy and estimated crack times update live as you type, across different attack speeds (online guessing vs. offline GPU cracking).
#️⃣ Hashing & the Avalanche Effect
Type text and watch its live SHA-256 hash. Change one character and see how drastically the hash output changes.
🎃 Spot the Phish
Click on the parts of two sample emails that look suspicious and find out which one is really a phishing attempt.
For teachers
- Every demo runs entirely client-side — no backend, no data collection, safe for any school network or Chromebook.
- Each page includes a plain-language explanation of the real-world version of the attack and how to defend against it — use these as discussion prompts.
- View-source friendly: the JavaScript for each demo is short and commented for students who want to see exactly how the capture logic works.