Rickidevs/RickPhis ? reverse-engineered prompt

Build me a lightweight phishing simulation web app for security training.

I want a local Flask app that serves a convincing Instagram style login page, a second step for 2FA, and an admin area where I can see any captured test submissions in the browser. It should save the submitted data to a JSON file so it persists after restart, and also expose a simple JSON endpoint for the admin data. Please make it easy to run on localhost, and include support for exposing it publicly through ngrok for demo use. If it helps, add Selenium so it can automate a browser flow, and use a production ready server setup for deployment.

Keep the UI clean and realistic, with templates and static files separated. Add sensible defaults for local use, but make the admin login and configuration easy to change. I’d also like a simple startup banner and clear README style setup instructions in the app itself or in comments if needed. If you need current docs for Flask, Selenium, or ngrok, look them up online first.