mrd0x/BITB

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

2897 stars · 477 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of HTML/JavaScript templates implementing the Browser In The Browser (BITB) phishing technique, which renders fake browser window chrome around an embedded iframe to trick users into entering credentials. It provides dark/light and OS-styled variants that are customized via placeholder variables.

Use cases

• simulate browser-in-the-browser phishing attacks in authorized red team engagements
• create fake login window templates for security awareness training
• demonstrate BITB phishing techniques to security teams
• test user susceptibility to iframe-based credential phishing
• customize phishing window templates with target domain and branding

When to choose

• you are conducting an authorized penetration test or red team exercise
• you need realistic BITB phishing simulations for security awareness training
• you want to demonstrate the BITB attack technique to defenders

When to avoid

• you lack explicit authorization to test the target
• you need a general-purpose phishing framework with campaign management
• you want a defensive tool - this is offensive tooling, though the README links to a detection extension

Facets

application · maturity maintenance

security penetration-testing templating security penetration-testing web-development browser phishing social-engineering browser-in-the-browser red-team attack-templates iframe web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mrd0x/BITB")