Overview
Before beginning the exercise, start the pfSense, Windows 10, and Kali Linux VMs. If your host computer has sufficient RAM, start Windows Server 2016 before Windows 10.
In this exercise, you'll create a credential harvesting website designed to steal a user's password. It would be illegal to deceive another person with it, so you'll just see how easy the process is for an attacker.