Omniprey — Authorised PenTest Platform

Capabilities AiTM Relay Attack Chain Docs Free Trial →

● Authorised red team infrastructure ● 67 simulation sites

Omniprey

Security assessment • AiTM relay • Risk scoring

▶ Deploy Free Trial Workspace Login

3-day trial — no card required — full access from minute one

67+ Simulation Sites

18+ AiTM Presets

14 Stage 2 Templates

<2m First Campaign

01 / Email Campaign Engine

Precision social engineering at scale.

Template vars: {{.FirstName}}, {{.URL}}, {{.Tracker}}
1×1 tracking pixel — silent open timestamping
Unique token per target — click logged with IP + UA
Schedule delivery — hourly cron processor
Event timeline: sent → opened → clicked → submitted → valid

From: IT Security <security@contoso-corp.com> | To: j.chen@acme.io

Hi Jane,

Your Microsoft 365 account requires immediate verification due to a suspicious sign-in from 213.45.67.88 (Kyiv, UA).

▶ Verify My Account Now

02 / AiTM Credential Relay

Live relay. Real session cookies.

Server-side relay to real login endpoints
CSRF harvesting — forged UA, Referer, Origin
6-hop redirect chain — merges Set-Cookie at each
Success regex — valid vs. invalid in real time
18+ presets: Microsoft · Google · GitHub · Discord

relay_session.log

03 / Risk Scoring & Awareness

Automated scores. Built-in training.

Open: +5 pts • Click: +20 pts
Submitted: +35 pts • Valid: +20 pts
Training completion: −20 pts
Five-level heat map: none → critical
Org-wide risk report — top-risk leaderboard

Risk Dashboard — ACME Corp

Target	Score	Bar	Level
j.chen@acme.io	95		CRITICAL
m.okafor@acme.io	60		HIGH
s.patel@acme.io	40		MEDIUM
r.wilson@acme.io	10		LOW

Full Engagement Pipeline

Recon to debrief — one platform.

01

SMTP Config

02

Build Campaign

03

Import Targets

04

Send / Schedule

05

Pixel Open

06

Token Click

07

AiTM Relay

08

Stage 2

✓

Debrief

Live Capture Feed

Real-Time Dashboard

Credentials. Clicks. Opens.

Time Email Site Event Result IP — Location

Authorisation

Authorised engagements only.

📝

Signed ROE Required

Scope, participant roster, authorised activities, emergency stop — before any campaign deploys.

👤

Enrolled Participants Only

Emails go to consenting enrolled participants. Credentials are synthetic — never production.

🏭

Isolated Lab Environment

Stage 2 runs on snapshotted lab VMs, fully disconnected from production networks.

Deploy in under two minutes

Start your 3-day trial.

▶ Deploy Free Trial

No credit card • From £0.99/day • Cancel anytime