Aj Dumanhug ajdumanhug

## index.html
<html>
  <head>
    <title>Tabnabbing</title>
  </head>
  <body>
    <a href="http://tabnabbing.herokuapp.com/phishing_page.html"  target="_blank">Click Me</a>
  </body>
</html>

## phishing_page.html
<html>
  <head>
    <title>Gotcha!</title>
    <script>
      window.opener.location.replace("http://tabnabbing.herokuapp.com/pony.svg");
    </script>
  </head>
  <body>
    <h1>Why don’t you go back to the previous tab and watch the running pony. :)</h1>
  </body>

## best_practice.html
<a href="https://example.com" target="_blank" rel="noopener noreferrer">https://example.com</a>

## auto-core-update.php
// Turn on core major versions
add_filter( 'allow_major_auto_core_updates', '__return_true' );

// Turn on core minor versions
add_filter( 'allow_minor_auto_core_updates', '__return_true' );

## plugin-theme-auto-update.php
// Turn on plugins updates
add_filter( 'auto_update_plugin', '__return_true' );

// Turn on themes updates
add_filter( 'auto_update_theme', '__return_true' );

## hide-directories.php
Options All -Indexes

## secure-wp-config.php
<files wp-config.php>
order allow,deny
deny from all
</files>

## eliminiate-php-error-reporting.php
error_reporting(0);
@ini_set(‘display_errors’, 0);

## metasploit_exploits_by_rport.txt
exploit/osx/mdns/upnp_location: RPORT 0
exploit/windows/dcerpc/ms07_029_msdns_zonename: RPORT 0
exploit/windows/scada/igss9_misc: RPORT 0
exploit/windows/firewall/blackice_pam_icq: RPORT 1
exploit/windows/http/altn_webadmin: RPORT 1000
exploit/unix/webapp/webmin_show_cgi_exec: RPORT 10000
exploit/windows/backupexec/remote_agent: RPORT 10000
exploit/windows/oracle/osb_ndmp_auth: RPORT 10000
exploit/multi/misc/zend_java_bridge: RPORT 10001
exploit/windows/misc/gimp_script_fu: RPORT 10008

## keybase.md

      
        
          
            
              
              1 file
            
          
          
            
              
              0 forks
            
          
          
            
              
              0 comments
            
          
          
            
              
              0 stars
            
          
        
        
          
              
          
          
            
                ajdumanhug
                / keybase.md
            
            
              Created
              January 30, 2018 01:19
            
              
                keybase.md
              
          
        
      
        
  
      
    Keybase proof

I hereby claim:

I am ajdumanhug on github.
I am ajdumanhug (https://keybase.io/ajdumanhug) on keybase.
I have a public key whose fingerprint is F9DA 5646 FBC7 67D1 AEA2  7208 2F96 461D C299 283E

To claim this, I am signing this object:
	<html>
	<head>
	<title>Tabnabbing</title>
	</head>
	<body>
	<a href="http://tabnabbing.herokuapp.com/phishing_page.html" target="_blank">Click Me</a>
	</body>
	</html>
	<html>
	<head>
	<title>Gotcha!</title>
	<script>
	window.opener.location.replace("http://tabnabbing.herokuapp.com/pony.svg");
	</script>
	</head>
	<body>
	<h1>Why don’t you go back to the previous tab and watch the running pony. :)</h1>
	</body>
	// Turn on core major versions
	add_filter( 'allow_major_auto_core_updates', '__return_true' );

	// Turn on core minor versions
	add_filter( 'allow_minor_auto_core_updates', '__return_true' );
	// Turn on plugins updates
	add_filter( 'auto_update_plugin', '__return_true' );

	// Turn on themes updates
	add_filter( 'auto_update_theme', '__return_true' );
	exploit/osx/mdns/upnp_location: RPORT 0
	exploit/windows/dcerpc/ms07_029_msdns_zonename: RPORT 0
	exploit/windows/scada/igss9_misc: RPORT 0
	exploit/windows/firewall/blackice_pam_icq: RPORT 1
	exploit/windows/http/altn_webadmin: RPORT 1000
	exploit/unix/webapp/webmin_show_cgi_exec: RPORT 10000
	exploit/windows/backupexec/remote_agent: RPORT 10000
	exploit/windows/oracle/osb_ndmp_auth: RPORT 10000
	exploit/multi/misc/zend_java_bridge: RPORT 10001
	exploit/windows/misc/gimp_script_fu: RPORT 10008