cyb3rdefence.com is operated by AuvaLabs.

A controlled phishing engagement platform that pairs adversary-in-the-middle capture with same-day defender-side detection validation, under signed Rules of Engagement only.

Capture States

90d

Session TTL

RoE

Authorised Only

CSOC

Purple Team

Capabilities

Adversary-in-the-middle phishing

Real-time MFA bypass against Microsoft 365 and federated identity providers via reverse-proxy phishlets.

Session-grade capture

Authentication tokens stolen post-MFA. Replayable for full account takeover without password or factor.

Severity classification

Every captured session auto-tagged Visited / Vulnerable / Exploitable with vendor-specific remediation guidance.

Detection validation

Authenticated replay from a known IP so the target's CSOC can verify which alerts fire and which don't.

~/engagement — phishlab

# sample capture trace (sanitized)
$ phishlab capture detail --latest
  status EXPLOITABLE (15 cookies · ESTSAUTH + ESTSAUTHPERSISTENT)
  phishlet o365 vendor microsoft flow oauth2
  replay authenticated final outlook.office.com
  recommended remediation: 7 actions — ready for client report

Operator dashboard Authorised AuvaLabs operators only. Sign-in via Google with engagement-scoped allowlist.

Scope notice. All activity from this platform is conducted only against targets covered by a signed engagement letter and Rules of Engagement. Unauthorised use of any address, lure, or credential served from this domain is prohibited and will be reported.