A security-awareness training piece that shows people two attacks they can't evaluate by eye — a convincing fake "you've been hacked" terminal, and the QR code that silently delivers it.
Two social-engineering techniques defeat people's normal instincts. A fake compromise screen panics someone into calling a bogus support line or paying a ransom. And a QR code can't be read by eye, so the habit of checking a link before clicking it simply doesn't apply — attackers sticker over real codes, or embed them in email as images that text-based link scanners never inspect.
A hosted, full-screen fake hacked-terminal animation plus a companion QR page, written as awareness training: show people how convincing the attack looks, then walk through how to recognise and resist it.
Static HTML, CSS, and JavaScript — no build step, no dependencies, no data collection. The terminal page and the QR page are independent so either can be used on its own in a session.
Making the demo realistic enough to be persuasive while keeping it unambiguously an educational artifact: it's hosted openly, it collects nothing, and the explanation of the attack ships in the same repo as the demo of it.
Awareness training works on demonstration, not description. People who have just been briefly fooled by a fake terminal remember the lesson; people who were only told about one do not.
Source repository
Back to the portfolio