Daniel Duggan
Offensive Security Specialist & Training Lead at Fortra
United Kingdom
Summary
🤩
RockstarDaniel Duggan is an offensive security specialist and training lead with 11 years of hands-on experience in red teaming, post-exploitation tooling, and privilege escalation research. Based in the UK and currently at Fortra, he contributes deeply to prominent .NET offensive frameworks—adding persistence, AMSI bypasses, lateral movement, and credential-extraction modules to projects like SharpSploit and Covenant. His open-source work spans Windows privilege escalation and reconnaissance tools (Watson, Sherlock, SQLRecon), where he implements CVE-aware checks, SPN enumeration, and automation for exploiting real-world gaps. Colleagues rely on him for practical, backend-focused offensive capabilities and for translating complex exploit techniques into training-ready content. An interesting detail: he has contributed code that balances evasion (AMSI bypass, AV tweaks) with improved reliability and error handling, showing an operator’s eye for both stealth and robustness.
11 years of coding experience
Github Skills (38)
process-injection10
javascript10
wmi10
vulnerability10
windows10
net10
audit10
dotnet10
point-of-sale10
pos10
netframework10
security10
asp-net10
security-testing10
exploit10
Programming languages (14)
Github contributions (5)
rasta-mouse/Watson
Oct 2018 - Oct 2020
Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
Role in this project:
Security Engineer
Security EngineerContributions:1 release, 31 commits, 8 PRs in 2 years
Contributions summary:Daniel primarily contributed to the development of a tool designed to identify and exploit Windows privilege escalation vulnerabilities. Their work involved implementing checks for specific CVEs, including those related to patch versions and build numbers. The user's contributions included adding new CVE checks, modifying existing ones to incorporate updated patch information and supersedence details. They were also responsible for improving error handling and updating the codebase to support newer Windows builds.
privilege-escalationvulnerabilities
rasta-mouse/Sherlock
Apr 2017 - Oct 2018
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
Role in this project:Security Engineer
Security EngineerContributions:23 commits, 4 PRs, 20 pushes in 1 year 6 months
Contributions summary:Daniel primarily contributed to a PowerShell script designed to identify missing software patches related to local privilege escalation vulnerabilities. Their work focused on incorporating vulnerability checks for specific CVEs (e.g., CVE-2017-7199) and Microsoft bulletins. They implemented functions to retrieve software versions, updated exploit tables, and added support for checking system architectures to determine vulnerability status. These modifications enhance the script's ability to detect potential security flaws.
powershellprivilege-escalationvulnerabilities
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.