notesearch exploitation