🧪 VIYUH BDR TEST — SAFE LOCAL SIMULATION (not a real site, nothing is sent anywhere)

This page pretends to be: a generic SaaS login — “Acme Cloud” (this is App A, the FIRST app).

The trick: we’re testing password reuse — using the SAME password on two different apps. One reused password = if any site is breached, the attacker walks into the others.

What to do here (App A): 1 Type any password, e.g. Hunter2!, in the Password box. 2 Click Sign in. On THIS page you should see nothing from BDR yet — first use of a password is fine.

✅ With VIYUH BDR ON you SHOULD see on App A: nothing (no banner) — this is the first time the password is seen.

👉 Then open App B and type the SAME password. The reuse banner appears on App B. Mark PASS/FAIL on App B.

⚠️ TYPE the password by hand — do NOT use the browser’s saved-password autofill. Autofill puts a DIFFERENT saved password on each site, so the hashes won’t match and the test won’t fire. The two passwords must be identical, character for character.

🔒 Privacy: only a salted hash of the password ever leaves the page — never the password itself.

➡️ Next step → Open App B — Globex Portal · or use the Guided 2-page flow

Acme Cloud

Sign in

Use your Acme Cloud account to continue.

✓ Signed in to Acme Cloud (simulated). Now open App B — Globex Portal and type the same password.

or continue with

New to Acme? Create an account