Live demo · Interactive modules
Interactive Cybersecurity Awareness Free Attack Scenarios
Free cybersecurity training, no sign-up, interactive modules to understand real attacks (ransomware, AiTM phishing, SQL injection, XSS, keyloggers, path traversal and more...).
- 100% free
- No sign-up
- Real attack scenarios
Your progress
No module viewed yet
- interactive modules
- 15
- attack families
- 5
- per module on average
- ~2 min
Quick start
Express path
The 7 essential attacks, in the best order to understand how an attacker thinks.
Why these modules
Understanding the attack is the first line of defense
See the attack from the inside
Each module replays a real scenario step by step: what the victim sees, what the attacker does.
Concrete reflexes
Every demo ends with the warning signs and the good practices that stop the attack.
Ideal for your teams
Usable as is in a meeting or for self-training, no account or install, on desktop and mobile.
Library
15 Free Cybersecurity Awareness Modules
Filter by attack family or search for a specific topic.
Phishing
A fraudulent email step by step, a fake Microsoft page annotated with 6 red flags, and a simulated vishing call with automatic script playback.
PhishingLaunch the demo- Step 2
SQL Injection
Authentication bypass via a SQL payload: watch the manipulated query live and apply the fix to block the attack.
InjectionLaunch the demo Ransomware
Intrusion, spread, wave encryption and ransom note: follow every phase of a ransomware attack and its concrete impact.
MalwareLaunch the demo- Step 1
XSS · Cross-Site Scripting
Script injection in a forum comment, real-time session cookie theft and account takeover, illustrated.
InjectionLaunch the demo XXE · XML External Entity
A booby-trapped XML forces the server to read the internal .env file: database passwords, API secrets and tokens exposed in a single request.
InjectionLaunch the demoPassword spraying
Follow every password attempt in real time, then discover what the attacker sees after the breach: mailbox, HR data and credentials.
AuthenticationLaunch the demoSSRF · Server Side Request Forgery
The attacker supplies an internal URL: the server contacts its own network and returns AWS credentials. Animated step-by-step flow.
InjectionLaunch the demoClickjacking
An invisible iframe overlays a legitimate button: one click confirms a €25,000 payment without the user noticing.
PhishingLaunch the demo- Step 5
IDOR · Insecure Direct Object Reference
Changing an identifier in the URL to access another user's confidential data with no privilege escalation at all.
AuthenticationLaunch the demo - Step 6
Keylogger
Three keystroke-capture variants — software, a rigged USB cable and a browser extension — with exfiltration to a C2 server.
MalwareLaunch the demo - Step 4
Path Traversal
Reading sensitive files (.env, SSH keys, server configuration) via an uncontrolled path parameter in the URL.
InjectionLaunch the demo - Step 3
Cleartext Traffic
Interactive Wireshark capture: Telnet, FTP and HTTP expose credentials and passwords in cleartext on the local network.
NetworkLaunch the demo Juice Jacking
A compromised public USB station or a BadUSB cable: your charging phone can be fully exfiltrated in under 3 minutes, with no alert at all.
NetworkLaunch the demo- Step 7
Password Reuse
One breached site is enough: stolen credentials are automatically tested via credential stuffing. With an interactive Have I Been Pwned check.
AuthenticationLaunch the demo Session Hijacking · AiTM Phishing
Even with MFA enabled, an AiTM proxy steals the session cookie after validation. Step-by-step simulation, Twilio/Cloudflare case study and FIDO2 protection.
PhishingLaunch the demo
FAQ
Frequently Asked Questions about Cybersecurity Awareness
What is cybersecurity awareness?
Cybersecurity awareness is a training program that teaches users to recognize and avoid common cyberattacks: phishing, ransomware, social engineering, weak passwords. ForenShield offers 15 free, interactive modules to understand real threats with no sign-up.
How does a cyberattack simulation work?
A cyberattack simulation reproduces the real steps of an attack (phishing, ransomware, SQL injection) in a safe environment. The goal is to make the mechanisms visible and understandable, for effective awareness with no real risk.
Which attacks are covered in ForenShield's awareness modules?
The 15 modules cover: phishing, AiTM phishing (MFA bypass), ransomware, SQL injection, XSS, SSRF, XXE, IDOR, path traversal, password spraying, password reuse, keyloggers, juice jacking, unencrypted network traffic and clickjacking.
Is ForenShield's cybersecurity training free?
Yes. ForenShield's 15 awareness modules are entirely free, with no sign-up and no ads. They're accessible directly from the browser and can be used to train teams in a company or for individual self-training.
Train your teams with an expert
Tailored awareness workshops, phishing simulations and certified training to anchor the right reflexes in your organization.