Updated 8 days ago

Phish-Eye Lens

Understand the qualms of password selection and phishing tactics through a hacker's lens - deducing a victim's password through their personal data.

  • AI / Robotics

Our Inspiration

Try to remember some of your first passwords. Most likely, they were passwords that were built around something memorable in your life, like your school, family, pet names, hobbies, and more. Ah, how naive and unassuming you were. Unfortunately, your very own passwords that you thought you grew and nurtured so well might as well be heaps of gold, piles of treasures for any reasonably skilled hacker around the globe. At a first glance, you may not imagine that a password above 8 characters could be easily cracked. After all, you can't even figure out a reasonable combination in the wardrobe. However, millions of users are phished for their personal data every year, lying defenseless as hackers prey down upon their data and finances.

Now you might wonder, what do these chronically online hackers do with their day? How long do they struggle in your emails, texts, and calls just to glean a morsel of information? Why don't they touch grass? Well, we'll say that these are completely valid questions. Sometimes, you just have to see the other side - what it's truly like to phish for information and what tactics phishers employ in their daily activities. Only when you view the world in a different lens do you truly learn what's behind the Phish-Eye.

Our Idea 0_0

We are BK, Mike, Gabriel, and Karanjot, and here is where we present our mystery/puzzle web app - Phish-Eye Lens. By playing the role of the sneaky phisher, you explore a victim's device and examine their personal data, finding key information that could lead you to cracking their RBC Bank password. Using generative AI and some very clever prompt engineering, we designed intricate, logical puzzles with key information that slowly leads you towards breaking bad. Keep your magnifying glasses peeled folks, dive deep into the world of phishing and develop a new perspective.

Features

Our app includes:

  • Procedurally-generated Phishing puzzles using Generative AI and some back-heavy prompt-engineering. Built by Gabriel, A regex of common password combinations was combined with LLM hallucinations for a unique and mind-bending scenario every solve.
  • Seamless Backend-Frontend integration. Crafted mainly by BK, we ensured that every HTTP request was like a cherry on top, ensuring that his node.js server was a bridge between the LLM Model and the Frontend Components.
  • Complex, beautiful Frontend. Partnered by Mike and Karanjot, you are sure to be immersed in the world of Phishing. With a graphical Tablet emulator and working chat/email applications, your dive into data will be the ride of your life.

How we built it

Languages: Javascript, Typescript, HTML, CSS Frameworks/Libraries: React, Node.js, Next.js, TailwindCSS, Gemini API Developer Tools: Git, Github, Vercel, Postman, Google Cloud AI

Next Steps

  • Improving LLM prompts to enable a further variety of scenarios and passwords
  • Include Image generation models for more comprehensive user profiles and potential clues hidden in the photos!
  • Add support for more tablet applications, giving you much more freedom to phish beyond your tiny puddle.