L.O.L | Link-Open-Lab

 _      ____   _
| |    / __ \ | |
| |   | |  | || |
| |   | |  | || |
| |___| |__| || |____
|______\____/ |______|

Professional Unified Phishing Simulation & Security Auditing Framework by Abdalla Omran (dx0rz).

L.O.L is a unified, automation-first framework designed for controlled phishing simulation, form-flow analysis, and defensive security auditing in authorized lab environments. It combines Python orchestration, PHP template execution, and optional cloud tunnel exposure into one streamlined developer experience.

L.O.L orchestrates three layers seamlessly:

1. Python Control Plane : Service orchestration, proxying, monitoring, NDJSON event normalization, and live dashboard rendering.
2. PHP Execution Layer : Template runtime served from published content in .lol_runtime/www.
3. Tunnel Bridge (Optional) : Public URL provisioning via cloudflared or ngrok for controlled remote testing.

This architecture provides a reproducible end-to-end workflow with minimal manual setup.

• 🛡️ Real-time proxying and request inspection
• 🎭 30+ pre-built templates from .sites
• ☁️ Optional cloudflared/ngrok tunneling with live URL capture
• 📡 Live dashboard with local/public endpoints and service status
• 🧾 Compact NDJSON capture pipeline (one event per line)
• 🧠 Smart credential-like field extraction for security analysis
• 🧰 Docker-ready runtime for portable execution
• 🔔 Optional Telegram status/alert notifications

• Python 3.12+
• PHP CLI
• cloudflared (optional)
• ngrok (optional)

git clone https://github.com/dx0rz/L.O.L.git
cd L.O.L

python3 -m venv .venv
source .venv/bin/activate
python3 -m pip install --upgrade pip
python3 -m pip install -r requirements.txt

python3 main.py --list-sites

python3 main.py

When you launch L.O.L:

1. Choose tunnel mode (Local only / cloudflared / ngrok) from the interactive prompt.
2. Pick a template from the interactive list.
3. L.O.L publishes it to .lol_runtime/www.
4. PHP backend + Python monitor start automatically.
5. If a tunnel mode is enabled, a public URL is captured.
6. Live captures are rendered in the dashboard panel in real time.

python3 main.py --site instagram
python3 main.py --monitor-port 8081 --php-port 8001
python3 main.py --cloudflared
python3 main.py --ngrok
python3 main.py --show-auth --traffic-log-file traffic_log.json
python3 main.py --show-ip --traffic-log-file traffic_log.json

Notes:

• If no tunnel flag is passed, L.O.L shows an interactive tunnel chooser first.
• Local-only mode is still available from the chooser.
• --cloudflared-url is used only with --cloudflared.
• --ngrok is routed through the monitor/proxy so POST capture and live dashboard updates stay active.

Each capture event is stored as one JSON line:

{
  "timestamp": "2026-03-19T00:00:00Z",
  "site": "yahoo",
  "user": "example@mail.com",
  "pass": "example-password"
}

The screenshots below illustrate the default operator flow and dashboard experience.

docker build -t lol-link-open-lab:release .
docker run --rm lol-link-open-lab:release python3 main.py --list-sites

Use a virtual environment:

python3 -m venv .venv
source .venv/bin/activate
python3 -m pip install -r requirements.txt

sudo apt install php-cli

• Ensure cloudflared is installed and executable.
• Ensure you started the framework with --cloudflared.
• Restart and wait a few seconds for tunnel initialization.

• Ensure ngrok is installed and available in PATH.
• Ensure you started the framework with --ngrok.
• Ensure ngrok is authenticated:

ngrok config add-authtoken <YOUR_TOKEN>

This project is strictly for educational, authorized testing, and defensive security research. Unauthorized deployment, phishing abuse, credential theft, or testing without explicit permission is prohibited. You are solely responsible for legal compliance in your jurisdiction. The lead developer, Abdalla Omran (dx0rz), disclaims liability for misuse or unlawful operation.

• Never commit .lol_runtime/ or runtime logs.
• Sanitize screenshots before publishing.
• Mask local usernames, tunnel URLs, and captured credentials.
• Keep Telegram tokens and chat IDs out of source control.

Lead Developer: Abdalla Omran (dx0rz)

GPL-3.0. See LICENSE.