# VeryLazyTech

## VeryLazyTech - Cybersecurity & Hacking Insights

- [VeryLazyTech Hacking Guide](https://www.verylazytech.com/welcome/verylazytech-aboutme.md): 🔒 Welcome to VeryLazyTech's Cybersecurity Corner! 🔒
- [Support VeryLazyTech](https://www.verylazytech.com/welcome/support-verylazytech.md)
- [CVE - POC](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc.md)
- [Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/cve-2024-23692.md)
- [POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/poc-cve-2024-4956-nexus-repository-manager-3-unauthenticated-path-traversal.md)
- [POC - CVE-2024-45241: Path Traversal in CentralSquare's CryWolf](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/poc-cve-2024-45241-path-traversal-in-centralsquares-crywolf.md)
- [Telerik Auth Bypass CVE-2024-4358](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/telerik-auth-bypass-cve-2024-4358.md)
- [Check Point Security Gateways Information Disclosure - CVE-2024-24919](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/check-point-security-gateways-information-disclosure-cve-2024-24919.md)
- [CVE-2024-23897 - Jenkins File Read Vulnerability](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/cve-2024-23897-jenkins-file-read-vulnerability.md)
- [CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/cve-2024-10914-command-injection-vulnerability-in-name-parameter-for-d-link-nas.md): POC - CVE-2024–10914 - Command Injection Vulnerability in name parameter for D-Link NAS
- [POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE)](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/poc-cve-2024-21534-jsonpath-plus-vulnerable-to-remote-code-execution-rce.md): POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) due to improper input sanitization
- [CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/cve-2024-9935-pdf-generator-addon-for-elementor-page-builder-less-than-1.7.5-unauthenticated-arbitra.md): POC - CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary
- [CVE-2024-50623- Cleo Unrestricted file upload and download](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/cve-2024-50623-cleo-unrestricted-file-upload-and-download.md)
- [POC - WordPress File Upload plugin, in the wfu\_file\_downloader.php file before version <= 4.24.11](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/poc-wordpress-file-upload-plugin-in-the-wfu_file_downloader.php-file-before-version-less-than-4.24.1.md): WordPress File Upload plugin, in the wfu\_file\_downloader.php file before version <= 4.24.11
- [POC - Remote and unauthenticated attacker can send crafted HTTP requests to RCE - cve-2025-3248](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/poc-remote-and-unauthenticated-attacker-can-send-crafted-http-requests-to-rce-cve-2025-3248.md)
- [POC - CVE-2025–2539 File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/poc-cve-2025-2539-file-away-less-than-3.9.9.0.1-missing-authorization-to-unauthenticated-arbitrary-f.md)
- [POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution Vulnerability](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/poc-cve-2025-29306-foxcms-images-index.html-code-execution-vulnerability.md)
- [CVE-2025–64446 — A Red Team Offensive Playbook for FortiWeb RCE via Path Traversal + Authentication](https://www.verylazytech.com/vulnerabilities-and-exploits/cve-poc/cve-2025-64446-a-red-team-offensive-playbook-for-fortiweb-rce-via-path-traversal-+-authentication.md)
- [GitHub Dorks](https://www.verylazytech.com/dorks/github-dorks.md)
- [Top Hacking Books for 2024: FREE and Paid](https://www.verylazytech.com/resources/editor.md): Boost your cybersecurity skills with VeryLazyTech’s self-study resources—learn the lazy way!
- [How to Study for OSCP with the PWK Book PDF](https://www.verylazytech.com/resources/markdown.md)
- [Top 20 phishing tools to use in 2024](https://www.verylazytech.com/resources/top-20-phishing-tools-to-use-in-2024.md)
- [Top 8 Bug Bounty Books for 2025: Must-Reads for Ethical Hackers](https://www.verylazytech.com/resources/top-8-bug-bounty-books-for-2025-must-reads-for-ethical-hackers.md)
- [Top Hacking Tools and Skills You Need to Learn in 2025](https://www.verylazytech.com/resources/top-hacking-tools-and-skills-you-need-to-learn-in-2025.md)
- [Penetration Testing & Hacking Tools List](https://www.verylazytech.com/resources/penetration-testing-and-hacking-tools-list.md)
- [Top Cybersecurity Books by Topic](https://www.verylazytech.com/resources/top-cybersecurity-books-by-topic.md): Looking for the best cybersecurity books? This list covers ethical hacking, OSINT, red teaming, malware analysis, and more—organized by topic for easy access.
- [The Ultimate Penetration Testing Methodology (2025 Edition)](https://www.verylazytech.com/resources/the-ultimate-penetration-testing-methodology-2025-edition.md)
- [Client Side Template Injection (CSTI)](https://www.verylazytech.com/pentesting-web/client-side-template-injection-csti.md)
- [Identify a Server’s Origin IP](https://www.verylazytech.com/pentesting-web/identify-a-servers-origin-ip.md)
- [2FA/MFA/OTP Bypass](https://www.verylazytech.com/pentesting-web/2fa-mfa-otp-bypass.md)
- [IDOR](https://www.verylazytech.com/pentesting-web/idor.md): Learn to uncover more IDORs the lazy way with VeryLazyTech—tips, tricks, and hacks revealed!
- [Open Redirect](https://www.verylazytech.com/pentesting-web/open-redirect.md): Open Redirect (also known as Unvalidated Redirects and Forwards) occurs when a web application accepts user-supplied input and redirects the user to an arbitrary URL without proper validation.
- [Subdomain Takeover](https://www.verylazytech.com/pentesting-web/subdomain-takeover.md)
- [CMS Wp/Durpal/Joomla/etc..](https://www.verylazytech.com/pentesting-web/cms-wp-durpal-joomla-etc...md)
- [Penetration Testing WiFi Networks](https://www.verylazytech.com/pentesting-web/penetration-testing-wifi-networks.md)
- [Client-Side Path Traversal](https://www.verylazytech.com/pentesting-web/client-side-path-traversal.md)
- [Clickjacking](https://www.verylazytech.com/pentesting-web/clickjacking.md): Explore clickjacking attacks with VeryLazyTech—techniques, exploits, and lazy prevention tips!
- [Command Injection](https://www.verylazytech.com/pentesting-web/command-injection.md)
- [JWT Vulnerabilities](https://www.verylazytech.com/pentesting-web/jwt-vulnerabilities.md)
- [Bypass rating limit](https://www.verylazytech.com/pentesting-web/bypass-rating-limit.md): Bypass rate limits like a pro with VeryLazyTech—advanced exploits and lazy techniques unveiled!
- [CORS - Misconfigurations & Bypass](https://www.verylazytech.com/pentesting-web/cors-misconfigurations-and-bypass.md)
- [LDAP Injection](https://www.verylazytech.com/pentesting-web/ldap-injection.md)
- [File upload vulnerabilities](https://www.verylazytech.com/pentesting-web/file-upload-vulnerabilities.md)
- [Content Security Policy (CSP) bypass](https://www.verylazytech.com/pentesting-web/content-security-policy-csp-bypass.md)
- [Brute Force - Services, web, local, tools & wordlists](https://www.verylazytech.com/pentesting-web/brute-force-services-web-local-tools-and-wordlists.md): A comprehensive brute force guide covering web logins, APIs, and local services like IMAP, MySQL, and LDAP using tools like Hydra, Medusa, Legba, and more.
- [Shellshock](https://www.verylazytech.com/pentesting-web/shellshock.md)
- [Copy of Copy of Tampatle Duplicate](https://www.verylazytech.com/pentesting-web/copy-of-copy-of-tampatle-duplicate.md)
- [XSS](https://www.verylazytech.com/pentesting-web/xss.md)
- [Practical Linux Commands](https://www.verylazytech.com/linux/practical-linux-commands.md)
- [Bypassing Bash Restrictions - Rbash](https://www.verylazytech.com/linux/bypassing-bash-restrictions-rbash.md)
- [Privilege escalation - Linux](https://www.verylazytech.com/linux/privilege-escalation-linux.md)
- [Linux Environment Variables](https://www.verylazytech.com/linux-environment-variables.md)
- [Active Directory Methodology](https://www.verylazytech.com/windows/images-and-media.md)
- [Antivirus (AV) Bypass](https://www.verylazytech.com/windows/antivirus-av-bypass.md): In this guide, we provide a deep dive into Windows Antivirus (AV) and Endpoint Detection and Response (EDR) bypass techniques, empowering red teamers and advanced penetration testers with up-to-date,
- [Practical Windows Commands](https://www.verylazytech.com/windows/practical-windows-commands.md)
- [100+ Windows CMD Commands](https://www.verylazytech.com/windows/100+-windows-cmd-commands.md)
- [FTP - Port 21](https://www.verylazytech.com/network-pentesting/ftp-port-21.md)
- [SSH- Port 22](https://www.verylazytech.com/network-pentesting/ssh-port-22.md)
- [Telnet - Port 23](https://www.verylazytech.com/network-pentesting/telnet-port-23.md)
- [SMTP/s - Port 25,465,587](https://www.verylazytech.com/network-pentesting/smtp-s-port-25-465-587.md)
- [WHOIS - Port 43](https://www.verylazytech.com/network-pentesting/whois-port-43.md)
- [TACACS+ - Port 49](https://www.verylazytech.com/network-pentesting/tacacs+-port-49.md)
- [DNS - Port 53](https://www.verylazytech.com/network-pentesting/dns-port-53.md)
- [TFTP/Bittorrent-tracker - Port 69/UDP](https://www.verylazytech.com/network-pentesting/tftp-bittorrent-tracker-port-69-udp.md)
- [Finger - Port 79](https://www.verylazytech.com/network-pentesting/finger-port-79.md)
- [Web - Port 80,443](https://www.verylazytech.com/network-pentesting/web-port-80-443.md): Ports 80 and 443 are the primary ports for web traffic, with port 80 handling unencrypted HTTP traffic and port 443 managing encrypted HTTPS traffic.
- [Kerberos - Port 88](https://www.verylazytech.com/network-pentesting/kerberos-port-88.md): Master pentesting Kerberos on port 88 with VeryLazyTech’s lazy methodology—exploits included!
- [POP - Port 110/995](https://www.verylazytech.com/network-pentesting/pop-port-110-995.md)
- [Portmapper - Port 111/TCP/UDP](https://www.verylazytech.com/network-pentesting/portmapper-port-111-tcp-udp.md)
- [Ident - Port 113](https://www.verylazytech.com/network-pentesting/ident-port-113.md)
- [NTP - Port 123/UDP](https://www.verylazytech.com/network-pentesting/ntp-port-123-udp.md)
- [MSRPC - Port 135, 539](https://www.verylazytech.com/network-pentesting/msrpc-port-135-539.md)
- [NetBios - Port 137,138,139](https://www.verylazytech.com/network-pentesting/netbios-port-137-138-139.md)
- [SMB - Port 139 445](https://www.verylazytech.com/network-pentesting/smb-port-139-445.md)
- [IMAP - Port 143, 993](https://www.verylazytech.com/network-pentesting/imap-port-143-993.md)
- [SNMP - Ports  161, 162, 10161, and 10162/UDP](https://www.verylazytech.com/network-pentesting/snmp-ports-161-162-10161-and-10162-udp.md)
- [IRC - Ports 194,6667,6660-7000](https://www.verylazytech.com/network-pentesting/irc-ports-194-6667-6660-7000.md): IRC, initially a plain text protocol, was assigned 194/TCP by IANA but is commonly run on 6667/TCP and similar ports to avoid needing root privileges for operation.
- [Check Point Firewall - Port 264](https://www.verylazytech.com/network-pentesting/check-point-firewall-port-264.md)
- [LDAP - Ports 389, 636, 3268, 3269](https://www.verylazytech.com/network-pentesting/ldap-ports-389-636-3268-3269.md)
- [IPsec/IKE VPN - Port 500/UDP](https://www.verylazytech.com/network-pentesting/ipsec-ike-vpn-port-500-udp.md)
- [Modbus - Port 502](https://www.verylazytech.com/network-pentesting/modbus-port-502.md): Modbus is a communication protocol used in industrial automation to allow devices like programmable logic controllers (PLCs) to talk to each other.
- [Rexec - Port 512](https://www.verylazytech.com/network-pentesting/rexec-port-512.md): It is a service that allows you to execute a command inside a host if you know valid credentials (username and password).
- [Rlogin - Port 513](https://www.verylazytech.com/network-pentesting/rlogin-port-513.md)
- [Rsh - Port 514](https://www.verylazytech.com/network-pentesting/rsh-port-514.md)
- [Line Printer Daemon (LPD) - Port 515](https://www.verylazytech.com/network-pentesting/line-printer-daemon-lpd-port-515.md)
- [Apple Filing Protocol (AFP) - PORT 548](https://www.verylazytech.com/network-pentesting/apple-filing-protocol-afp-port-548.md)
- [RTSP - Port 554, 8554](https://www.verylazytech.com/network-pentesting/rtsp-port-554-8554.md)
- [IPMI - Port 623/UDP/TCP](https://www.verylazytech.com/network-pentesting/ipmi-port-623-udp-tcp.md)
- [Internet Printing Protocol (IPP) - Port 631](https://www.verylazytech.com/network-pentesting/internet-printing-protocol-ipp-port-631.md)
- [EPP - Port 700](https://www.verylazytech.com/network-pentesting/epp-port-700.md)
- [Rsync - Port 873](https://www.verylazytech.com/network-pentesting/rsync-port-873.md)
- [Rusersd Service - Port 1026](https://www.verylazytech.com/network-pentesting/rusersd-service-port-1026.md)
- [Socks - Port 1080](https://www.verylazytech.com/network-pentesting/socks-port-1080.md)
- [Java RMI - RMI-IIOP - Port 1098/1099/1050](https://www.verylazytech.com/network-pentesting/java-rmi-rmi-iiop-port-1098-1099-1050.md)
- [MSSQL  (Microsoft SQL Server) - Port 1433](https://www.verylazytech.com/network-pentesting/mssql-microsoft-sql-server-port-1433.md): Master pentesting MSSQL on port 1433 with VeryLazyTech’s guide—exploits, tips, and more!
- [Oracle TNS Listener - Port 1521,1522-1529](https://www.verylazytech.com/network-pentesting/oracle-tns-listener-port-1521-1522-1529.md)
- [PPTP - Port 1723](https://www.verylazytech.com/pptp-port-1723.md)
- [MQTT (Message Queuing Telemetry Transport) - Port 1883](https://www.verylazytech.com/mqtt-message-queuing-telemetry-transport-port-1883.md)
- [Compaq HP Insight Manager - Port 2301, 2381](https://www.verylazytech.com/compaq-hp-insight-manager-port-2301-2381.md)
- [NFS Service - Port 2049](https://www.verylazytech.com/nfs-service-port-2049.md)
- [Docker - Port 2375,2376](https://www.verylazytech.com/docker-port-2375-2376.md)
- [Squid - Port 3128](https://www.verylazytech.com/squid-port-3128.md)
- [iScsi - Port 3260](https://www.verylazytech.com/iscsi-port-3260.md)
- [SAPRouter - Port 3299](https://www.verylazytech.com/saprouter-port-3299.md)
- [MySql - Port 3306](https://www.verylazytech.com/mysql-port-3306.md)
- [RDP - PORT 3389](https://www.verylazytech.com/rdp-port-3389.md)
- [Distcc - Port 3632](https://www.verylazytech.com/distcc-port-3632.md)
- [Subversion (SVN) Server -Port 3690](https://www.verylazytech.com/subversion-svn-server-port-3690.md)
- [WS-Discovery - Port 3702/UDP](https://www.verylazytech.com/ws-discovery-port-3702-udp.md)
- [Erlang Port Mapper Daemon - PORT 4369](https://www.verylazytech.com/erlang-port-mapper-daemon-port-4369.md)
- [Cisco Smart Install - PORT 4786](https://www.verylazytech.com/cisco-smart-install-port-4786.md)
- [OPC UA - PORT 4840](https://www.verylazytech.com/opc-ua-port-4840.md)
- [Docker Registry - PORT 5000](https://www.verylazytech.com/docker-registry-port-5000.md)
- [Multicast DNS (mDNS) and DNS-SD - PORT 5353/UDP](https://www.verylazytech.com/multicast-dns-mdns-and-dns-sd-port-5353-udp.md)
- [Postgresql - PORT 5432,5433](https://www.verylazytech.com/postgresql-port-5432-5433.md)
- [Android Debug Bridge (ADB) - PORT 5555](https://www.verylazytech.com/android-debug-bridge-adb-port-5555.md)
- [Kibana - Port 5601](https://www.verylazytech.com/kibana-port-5601.md)
- [AMQP (RabbitMQ) - Port 5671/5672](https://www.verylazytech.com/amqp-rabbitmq-port-5671-5672.md)
- [VNC - Port 5800/5801/5900/5901](https://www.verylazytech.com/vnc-port-5800-5801-5900-5901.md)
- [CouchDB - Port 5984,6984](https://www.verylazytech.com/couchdb-port-5984-6984.md)
- [WinRM - Port 5985, 5986](https://www.verylazytech.com/winrm-port-5985-5986.md)
- [X11 - Port 6000](https://www.verylazytech.com/x11-port-6000.md)
- [Redis - Port 6379](https://www.verylazytech.com/redis-port-6379.md)
- [Apache Jserv Protocol (AJP) - Port 8009](https://www.verylazytech.com/apache-jserv-protocol-ajp-port-8009.md)
- [InfluxDB - Port 8086](https://www.verylazytech.com/influxdb-port-8086.md)
- [Splunkd - Port 8089](https://www.verylazytech.com/splunkd-port-8089.md)
- [Bitcoin - Port 8333, 18333, 38333, 18444](https://www.verylazytech.com/bitcoin-port-8333-18333-38333-18444.md)
- [FastCGI - Port 9000](https://www.verylazytech.com/fastcgi-port-9000.md)
- [HSQLDB - Port 9001](https://www.verylazytech.com/hsqldb-port-9001.md)
- [Cassandra - Port 9042, 9160](https://www.verylazytech.com/cassandra-port-9042-9160.md)
- [PJL (Printer Job Language) - Port 9100](https://www.verylazytech.com/pjl-printer-job-language-port-9100.md)
- [Elasticsearch - Port 9200](https://www.verylazytech.com/elasticsearch-port-9200.md)
- [Network Data Management Protocol (NDMP) - PORT 10000](https://www.verylazytech.com/network-data-management-protocol-ndmp-port-10000.md)
- [Memcache - Port 11211](https://www.verylazytech.com/memcache-port-11211.md)
- [RabbitMQ Management - Port 15672](https://www.verylazytech.com/rabbitmq-management-port-15672.md)
- [GlusterFS - Port 24007, 24008, 24009, 49152](https://www.verylazytech.com/glusterfs-port-24007-24008-24009-49152.md)
- [MongoDB - Port 27017, 27018](https://www.verylazytech.com/mongodb-port-27017-27018.md)
- [PPPP (CS2) P2P Cameras - Port 32100 UDP](https://www.verylazytech.com/pppp-cs2-p2p-cameras-port-32100-udp.md)
- [Tiller / Helm - Port 44134](https://www.verylazytech.com/tiller-helm-port-44134.md)
- [EtherNet/IP - Port 44818](https://www.verylazytech.com/ethernet-ip-port-44818.md)
- [Tamplate](https://www.verylazytech.com/tamplate.md)
- [File Transfer Cheatsheet: Windows and Linux](https://www.verylazytech.com/post-exploitation/file-transfer-cheatsheet-windows-and-linux.md): File transfer is a critical component in post-exploitation, penetration testing, and red teaming.
- [Kali Linux - Installation](https://www.verylazytech.com/technical-guides/kali-linux-installation.md)
- [Search Exploits](https://www.verylazytech.com/technical-guides/search-exploits.md): Stop Wasting Time! The Secret Method to Find Exploits in Minutes
- [Pivoting & Tunneling](https://www.verylazytech.com/technical-guides/pivoting-and-tunneling.md)
- [Prompt injection](https://www.verylazytech.com/hacking-ai/prompt-injection.md)
- [Data poisoning](https://www.verylazytech.com/hacking-ai/data-poisoning.md): Injecting malicious or misleading data into the training dataset to bias results.
- [Backdoor attacks](https://www.verylazytech.com/hacking-ai/backdoor-attacks.md): Placing hidden triggers in the model so it behaves differently when specific input patterns appear.
- [Prompt Injection & Jailbreaking](https://www.verylazytech.com/hacking-ai/prompt-injection-and-jailbreaking.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on a page URL with the `ask` query parameter:
```
GET https://www.verylazytech.com/welcome/verylazytech-aboutme.md?ask=<question>
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.