Very Lazy Tech

OSCP-Resources. A comprehensive collection of resources, tools, tips, and guides for preparing and succeeding in the OSCP (Offensive Security Certified Professional) certification.

CVE-2024-10914. POC - CVE-2024–10914- Command Injection Vulnerability in `name` parameter for D-Link NAS

CVE-2024-23692. POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692

Hacking-Books-2024. Top Hacking Books for 2024 (plus Resources): FREE and Paid

verylazytech.github.io. Google Dorks for Bug Bounty

CVE-2024-4956. POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal

CVE-2024-4358. Authentication Bypass Vulnerability — CVE-2024–4358 — Telerik Report Server 2024

CVE-2024-23897. POC - Jenkins File Read Vulnerability - CVE-2024-23897

CVE-2025-3248. Python

CVE-2024-24919. POC - CVE-2024–24919 - Check Point Security Gateways

CVE-2024-9047. POC - WordPress File Upload plugin, in the wfu_file_downloader.php file before version <= 4.24.11

CVE-2024-9935. PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary File Download

CVE-2024-50623. CVE-2024-50623 POC - Cleo Unrestricted file upload and download

CVE-2024-45241.

cve-2024-21534. POC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) due to improper input sanitization

verylazytech. Config files for my GitHub profile.

CVE-2025-2539. File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read

VeryLazyWayBack. The Ultimate Tool for Recon in Bug Bounty Hunting

Web-Security-Vulnerabilities. This repository demonstrates various web security vulnerabilities with Python code examples. Each folder contains a vulnerability demonstration along with an explanation and a fixed version of the code.

wordpress_hacking. A collection of intentionally vulnerable WordPress plugins and themes for security testing, research, and training purposes.

CVE-2025-64446. CVE-2025-64446 - A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

CVE-2025-29306. Shell

HTB-writeups.