Phishnoo Sandbox

Simulates malicious behaviors and attack vectors for security testing and educational demonstrations.

Presents a plausible, tool-rich workspace surface — file reading, credential listing, command execution, database queries, and configuration retrieval — that returns only synthetic results while logging every connection, tool call, and argument received. It enables researchers to measure what MCP clients and agents actually do when handed dangerous-sounding tools, including whether they follow injected instructions or complete a retrieve-then-use credential chain.

Enables guardrail and trust testing by exposing realistic malicious tool patterns such as shell execution, credential dumping, and data exfiltration, all without network access.

Enables MCP clients to generate synthetic ERP datasets, download the generated packages, and read labelled fraud answer keys using plain language.