Скачать или смотреть HackTheBox Napper: Read Elastic, Generate Key, Decrypt Blob in Golang

In Napper from HackTheBox, I'll need to pull values from an Elastic database that rotated every 5 minutes. The values are a seed and an encrypted blob. I'll use the seed with the random function in Go to generate a key, and use it to AES decrypt the blob. So today we're working in Go!

HackTheBox Napper Blog post: https://0xdf.gitlab.io/2024/05/04/htb...
HackTheBox Napper: https://www.hackthebox.com/machines/n...
Elastic Go Example: https://github.com/elastic/go-elastic...
Go gjson: https://github.com/tidwall/gjson
Elastic Client docs: https://pkg.go.dev/github.com/elastic...
Go getting started: https://go.dev/doc/tutorial/getting-s...

☕ Buy Me A Coffee: https://www.buymeacoffee.com/0xdf

[00:00] Introduction
[01:17] Show data with curl
[03:23] Creating Go project
[04:25] Elastic example code
[06:28] Updating code to connect to Napper
[10:33] Removing unneeded example code
[11:23] Getting seed
[14:56] Getting blob
[19:11] Converting main to function
[21:38] Generating key from seed
[24:26] Decrypt blob
[29:12] Conclusion

#pentest #ctf #bugbounty #golang #go #elastic