Skip to content

Instantly share code, notes, and snippets.

View ajdumanhug's full-sized avatar
🏠
Working from home

Aj Dumanhug ajdumanhug

🏠
Working from home
View GitHub Profile
@ajdumanhug
ajdumanhug / index.html
Last active June 29, 2016 00:46
Sample for Tabnabbing Blog Post
<html>
<head>
<title>Tabnabbing</title>
</head>
<body>
<a href="http://tabnabbing.herokuapp.com/phishing_page.html" target="_blank">Click Me</a>
</body>
</html>
@ajdumanhug
ajdumanhug / phishing_page.html
Created June 29, 2016 00:02
Sample of Tabnabbing for Blog Post
<html>
<head>
<title>Gotcha!</title>
<script>
window.opener.location.replace("http://tabnabbing.herokuapp.com/pony.svg");
</script>
</head>
<body>
<h1>Why don’t you go back to the previous tab and watch the running pony. :)</h1>
</body>
<a href="https://example.com" target="_blank" rel="noopener noreferrer">https://example.com</a>
@ajdumanhug
ajdumanhug / auto-core-update.php
Last active June 15, 2017 02:41
Enable Auto Core Update
// Turn on core major versions
add_filter( 'allow_major_auto_core_updates', '__return_true' );
// Turn on core minor versions
add_filter( 'allow_minor_auto_core_updates', '__return_true' );
@ajdumanhug
ajdumanhug / plugin-theme-auto-update.php
Created June 15, 2017 02:42
Enable Plugin and Theme Auto Update
// Turn on plugins updates
add_filter( 'auto_update_plugin', '__return_true' );
// Turn on themes updates
add_filter( 'auto_update_theme', '__return_true' );
@ajdumanhug
ajdumanhug / hide-directories.php
Created June 15, 2017 02:51
Hide your WordPress Directories from Public Users
Options All -Indexes
@ajdumanhug
ajdumanhug / secure-wp-config.php
Created June 15, 2017 03:11
Secure WP Config File
<files wp-config.php>
order allow,deny
deny from all
</files>
@ajdumanhug
ajdumanhug / eliminiate-php-error-reporting.php
Created June 15, 2017 03:35
Eliminate PHP Error Reporting
error_reporting(0);
@ini_set(‘display_errors’, 0);
@ajdumanhug
ajdumanhug / metasploit_exploits_by_rport.txt
Created October 20, 2017 07:38
Find metasploit exploits by their default RPORT port
exploit/osx/mdns/upnp_location: RPORT 0
exploit/windows/dcerpc/ms07_029_msdns_zonename: RPORT 0
exploit/windows/scada/igss9_misc: RPORT 0
exploit/windows/firewall/blackice_pam_icq: RPORT 1
exploit/windows/http/altn_webadmin: RPORT 1000
exploit/unix/webapp/webmin_show_cgi_exec: RPORT 10000
exploit/windows/backupexec/remote_agent: RPORT 10000
exploit/windows/oracle/osb_ndmp_auth: RPORT 10000
exploit/multi/misc/zend_java_bridge: RPORT 10001
exploit/windows/misc/gimp_script_fu: RPORT 10008
@ajdumanhug
ajdumanhug / keybase.md
Created January 30, 2018 01:19
keybase.md

Keybase proof

I hereby claim:

  • I am ajdumanhug on github.
  • I am ajdumanhug (https://keybase.io/ajdumanhug) on keybase.
  • I have a public key whose fingerprint is F9DA 5646 FBC7 67D1 AEA2 7208 2F96 461D C299 283E

To claim this, I am signing this object: