===== Option 1: collect only usernames, but no passwords ===== You might only want to collect the usernames when a user submits a login, but not the passwords. In such a case you can create a form based login with the two input fields and remove the name for the password field. Like this LUCY will only collect the usernames within a login: Test Login

Login Form

Login here
===== Option 2: Do not collect any data ===== To exclude the credentials from the POST request one should empty the name attribute of the login and password fields. So the form on index.html will look as follows:


In that case neither user login nor password will leave the victims browser. ===== Option 3: collect full usernames, but only first three letters of the password ===== {{ 3letters_.png?600 }} (1) Append onsubmit="return on_submit(); to your form action. Make sure the password field is called "password". Then add this javascript at the end of the html code (2): Here is the full HTML code of the web based scenario "Ipad Mini Promotion": iPad mini Promotion

We are happy to announce a special promotion together with our partner "NCC II supplies" giving away 200 Ipad mini's for our employees. The promotion starts from 01 July 2015 until 30 September 2015.

The promotion is open to all employees of company X. 

Company homepage

**Option 4: Adding parameters for collecting data in login forms during web-based attacks.** Sometimes there is a need to ask users for some extra information in the form where their credentials are supposed to be filed in and as a consequence, to upload received information. **This article is dedicated to adding new inputs in the form of the attack scenario and collecting credentials.** In web-based attacks LUCY is recording **ALL** data send back to the landing page in a form POST request. This article will help you to add more fields in your form and collect entered information. As you can see on the screenshot below, this form has two fields for entering the credentials (Login name and the Password). Let’s try to understand what does it consist of?