Educational demonstration showing password interception risks on public WiFi networks
This demonstration teaches seniors about:
- How passwords can be intercepted on unsecured WiFi networks
- Why 2-Factor Authentication (2FA) is essential
- The importance of HTTPS and VPNs
- Basic WiFi security awareness
- Professional-looking "SecureBank Online" login page
- Accepts any username/password combination
- Designed to look trustworthy (like real banking sites)
- Real-time password interception visualization
- Dramatic console output perfect for projecting
- Shows exactly what an attacker would see
- One-command start:
./start-demo.sh - One-command stop:
./stop-demo.sh - Clean environment - nothing installed on your MacBook
- Easy cleanup - no traces left behind
- Docker Desktop installed and running
- MacBook connected to training room WiFi
- Projector/big screen for demonstration
./start-demo.sh- Show the website - Project browser showing "SecureBank Online"
- Ask for volunteers - Have seniors login with any username/password
- Reveal the capture - Show your terminal with intercepted passwords
- Teach the lesson - Explain WiFi security and protection methods
./stop-demo.shOnce started, seniors can visit:
- From their phones/tablets:
http://YOUR-IP:8080 - From your laptop:
http://localhost:8080
The start script will display your current IP address.
"I want to show you something that might surprise you about WiFi security. This is educational only - what I'm demonstrating would be illegal to do without permission."
"Here's a banking website that looks completely normal and secure. Notice the professional design and security badges."
"I'd like a volunteer to login with any username and password - you can make them up. Watch what happens on the big screen..."
[Project your terminal showing password capture in real-time]
"As you can see, I just captured your login credentials in plain text. Anyone with basic tools on this WiFi network could do the same thing."
- 2FA Protection: Even if password is stolen, account remains secure
- HTTPS Importance: Look for the lock icon in browsers
- VPN Usage: Encrypts all network traffic
- Public WiFi Risks: Avoid banking/email on unsecured networks
- Clear "Demo Only" warnings on all pages
- Passwords masked in web interface (but visible in console for demo)
- No data storage - everything is temporary
- Automatic cleanup when stopped
- Non-root containers for safety
- Isolated network environment
- Health checks and proper error handling
- No external network access required
π± Senior's Device π₯οΈ Your MacBook
β WiFi β
βββββββββββββββββββ βββββββββββββββββββ
β Banking Website β β Docker β
β (Port 8080) β β Password Logger β
βββββββββββββββββββ βββββββββββββββββββ
β β
π± Login Form πΊ Big Screen
(Shows Capture)
- Senior types username/password on "secure" banking site
- Data transmitted over WiFi in plain text (HTTP)
- Your console immediately displays captured credentials
- Success page educates about what just happened
After this demo, seniors will understand:
β WiFi Risk Awareness
- Public WiFi can expose their passwords
- Attackers can easily intercept unencrypted traffic
β Protection Strategies
- Enable 2FA wherever possible
- Look for HTTPS (lock icon) before entering passwords
- Use VPN on public networks
- Avoid sensitive activities on unsecured WiFi
β Practical Next Steps
- How to enable 2FA on common services
- Recommended VPN services for seniors
- Browser security settings to check
# Check if Docker is running
docker info
# Restart Docker Desktop if needed
# (Use Docker Desktop GUI)The demo uses port 8080 to avoid macOS port 5000 conflicts. If 8080 is busy:
- Stop other applications using port 8080
- Or modify
docker-compose.ymlto use different port
- Ensure MacBook and senior devices are on same WiFi network
- Check firewall settings if connection fails
- Use
ifconfigto verify IP address
For more advanced demonstrations:
# Start with Wireshark web interface
docker-compose --profile with-wireshark up -d
# Access Wireshark at http://localhost:3000For technical audiences:
# Start with detailed packet analysis
docker-compose --profile with-capture up -dAfter the demo, provide seniors with:
- 2FA Setup Guides for Gmail, Facebook, banking sites
- VPN Recommendations appropriate for seniors
- Browser Security Checklist for safe browsing
- WiFi Safety Tips printout for reference
CRITICAL: This demonstration is for educational purposes only in controlled environments.
β Appropriate Use:
- Educational workshops with consent
- Your own controlled WiFi network
- Simulated environment with volunteer participants
β Illegal Use:
- Real networks without permission
- Capturing real user credentials
- Any malicious purposes
Always explain the legal and ethical boundaries to your audience.
This demo helps seniors understand cybersecurity risks in an approachable, visual way. The goal is education and awareness, not technical expertise.