@taviso @tqbf @thenthj proxying 2fa fields (or captcha) plus running a real headless browser is *FAR* more complex than a simple "present fake form, save entered form data to database" .. like 2 orders of magnitude harder, it is also extremely site specific & brittle if they update login form