Cyberpulse AI Redops: Credential Trap Sim: Fake Login Page Simulation

The workflow JSON

Copy or download the full n8n JSON below. Paste it into a new n8n workflow, add your credentials, activate. Full import guide →

{
  "id": "bdR9lq4doOG81hsg",
  "name": "\ud83d\udd34 RedOps Module 5 Credential_Trap_Sim",
  "tags": [
    {
      "id": "uNqHAlvBtMsP4gFd",
      "name": "Pro",
      "createdAt": "2025-07-07T09:34:20.437Z",
      "updatedAt": "2025-07-07T09:34:20.437Z"
    }
  ],
  "nodes": [
    {
      "id": "369c1ed0-5eeb-4266-a9e2-16f1afbe3343",
      "name": "Sticky Note",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        0,
        0
      ],
      "parameters": {
        "content": ""
      },
      "typeVersion": 1
    },
    {
      "id": "09c302c8-825d-4bc2-9db6-c173fc057c27",
      "name": "\u26a1 Trigger TrapSim",
      "type": "n8n-nodes-base.manualTrigger",
      "position": [
        -1380,
        180
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "bc923e83-fdcc-448a-afee-6aae62f112e8",
      "name": "\ud83d\udcc4 Get Trap Targets",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        -1160,
        180
      ],
      "parameters": {},
      "typeVersion": 4.6
    },
    {
      "id": "0b324b13-0dce-404d-b787-7120fec7dd8c",
      "name": "\ud83e\uddf9 Filter Valid Targets",
      "type": "n8n-nodes-base.if",
      "position": [
        -940,
        180
      ],
      "parameters": {},
      "typeVersion": 2.2
    },
    {
      "id": "f881e16c-7793-4215-a2d4-4694944076bb",
      "name": "\ud83c\udfaf Generate Trap Link",
      "type": "n8n-nodes-base.set",
      "position": [
        -720,
        80
      ],
      "parameters": {},
      "typeVersion": 3.4
    },
    {
      "id": "c38c5fc5-467b-4634-b681-93b79af8cd3a",
      "name": "\ud83e\udea4 Simulate Credential Submission",
      "type": "n8n-nodes-base.set",
      "position": [
        -500,
        80
      ],
      "parameters": {},
      "typeVersion": 3.4
    },
    {
      "id": "ad69525b-c1ac-482b-9ddc-fffde16b2384",
      "name": "\ud83d\udcc4 Append Trap Log",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        -280,
        80
      ],
      "parameters": {},
      "typeVersion": 4.6
    },
    {
      "id": "f718681e-7008-4d35-92a3-6be22c73aaf5",
      "name": "Sticky Note2",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        0,
        300
      ],
      "parameters": {
        "content": ""
      },
      "typeVersion": 1
    }
  ],
  "active": false,
  "settings": {
    "executionOrder": "v1"
  },
  "versionId": "62bc2056-3347-4f59-8238-cddab073fc0f",
  "connections": {
    "\u26a1 Trigger TrapSim": {
      "main": [
        [
          {
            "node": "\ud83d\udcc4 Get Trap Targets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83d\udcc4 Get Trap Targets": {
      "main": [
        [
          {
            "node": "\ud83e\uddf9 Filter Valid Targets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83c\udfaf Generate Trap Link": {
      "main": [
        [
          {
            "node": "\ud83e\udea4 Simulate Credential Submission",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83e\uddf9 Filter Valid Targets": {
      "main": [
        [
          {
            "node": "\ud83c\udfaf Generate Trap Link",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83e\udea4 Simulate Credential Submission": {
      "main": [
        [
          {
            "node": "\ud83d\udcc4 Append Trap Log",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}

About this workflow

Simulate a phishing login page to test user behavior and SOC response. This controlled workflow sends trap links to predefined targets and logs simulated interaction results—without capturing real credentials.

Source: https://n8n.io/workflows/6510/ — original creator credit. Request a take-down →

More Data & Sheets workflows → · Browse all categories →

Related workflows

Workflows that share integrations, category, or trigger type with this one. All free to copy and import.