phishingstressor-webapp

https://github.com/wwitteveen-ut/phishingstressor-webapp

Repository

https://github.com/wwitteveen-ut/PhishingStressor-webapp/blob/main/

# Phishing Stressor Web Application

A Next.js-based web application for conducting and managing phishing research experiments in a controlled environment. This platform enables researchers to create experiments, compose emails, manage participants, and track engagement metrics.

## Features

### Researcher Features

- **Experiment Management**
  - Create and manage research experiments
  - Define experiment duration and participant groups
  - Add/remove researchers from experiments
  - Generate participant credentials

- **Email Management**
  - Compose and schedule emails
  - Rich text editor with formatting options
  - File attachment support
  - Email scheduling based on participant login time
  - Email timeline visualization

- **Analytics & Tracking**
  - Track email open rates
  - Monitor link clicks and attachment interactions
  - View participant responses and engagement
  - Analyze phishing attempt success rates
  - Visual heatmaps for email interactions

### Participant Features

- **Email Interface**
  - Realistic email client interface
  - Email viewing and responding capabilities
  - Attachment handling

## Development Setup

1. Install dependencies:
   ```bash
   yarn install
   ```

2. Copy `.env.example` to `.env` and fill in the required environment variables.

3. Run the development server:
   ```bash
   yarn dev
   ```

4. To build the project for production:
   ```bash
   yarn build
   ```

5. To start the production server after building:
   ```bash
   yarn start
   ```

## Technology Stack

- **Frontend Framework**: Next.js (with TypeScript)
- **UI Components**: Mantine UI
- **Rich Text Editing**: TipTap
- **State Management**: Zustand
- **Authentication**: Auth.js
- **API Mocking**: MSW (Mock Service Worker)

## Project Structure

```
src/
 app/                    # Next.js app router pages
 auth/                   # Authentication logic and components
 mail/                   # Email client implementation
    actions/           # Email-related server actions
    components/        # Email UI components
    store/             # Email state management
    utils/             # Email-related utilities
 researcher/            # Researcher dashboard implementation
    actions/           # Researcher server actions
    components/        # Researcher UI components
    store/             # Researcher state management
 shared/                # Shared utilities and components
 mocks/                 # Mock data and API handlers
```



6. Open [http://localhost:3000](http://localhost:3000) in your browser

Owner

Citation (CITATION.cff)

cff-version: 1.2.0
title: PhishingStressor-interface
message: >-
  If you use this software, please cite it using the
  metadata from this file.
type: software
authors:
  - given-names: Wessel
    family-names: Witteveen
repository-code: >-
  https://github.com/wwitteveen-ut/PhishingStressor-webapp.git
abstract: >-
  Phishing remains a widespread cyber threat, highlighting
  the need for research environments that capture realistic
  user behaviour to enhance tools to combat the issue.
  Existing methods, such as surveys and quizzes, often fall
  short because participants are aware that they are being
  studied, leading to unnatural responses. This paper
  presents a novel artifact to address these issues: a
  scenario-based phishing simulation interface developed as
  a TypeScript-based Next.js web application named
  PhishingStressor, to be combined with the backend of a
  separately created artifact. Following the Design Science
  Methodology, an artifact is described featuring a
  minimalist email client interface inspired by modern web
  clients, offering a recognizable and comfortable
  environment for participants. It enables researchers to
  design and manage experiments with randomized control
  groups and provides visualization tools to analyse user
  behaviour.
keywords:
  - cybersecurity
  - design science research
  - phishing simulation
  - user interface
version: 1.0.0

GitHub Events