notrubberduck
Overview
Offensive Security Research & Documentation A technical repository for advanced exploitation methodologies, CVE analysis, and infrastructure assessments. This platform documents the deconstruction of secure systems, focusing on logic flaws, Active Directory, and architectural vulnerabilities.
Latest Reports
A handcrafted Burp Suite extension that integrates Discord Rich Presence. Built using the Montoya API with real-time activity tracking, scope detection, and minimal resource usage.
MongoBleed (CVE-2025-14847) is a critical unauthenticated MongoDB vulnerability that allows remote attackers to leak uninitialized server memory via a zlib decompression flaw. This deep-dive explains the root cause, exploitation techniques, detection methods, and mitigation strategies to protect exposed MongoDB deployments.
A practical guide to Windows logon types and their security impact. Explains how each logon type affects credential exposure, lateral movement, and detection, with real-world offensive and defensive insights.
Targets & Tools
[TOOL] Burp Discord Activity
A lightweight Burp Suite extension that integrates Discord Rich Presence to display real-time security testing activity using the Montoya API.
[TOOL] Dns-Exfiltration
A Python-based DNS server that can receive and reconstruct data transmitted through DNS queries. This tool is useful for data exfiltration scenarios where traditional network communication methods are restricted.