Nitel's Red Logs

Job — VulnLab Writeup

Mon, 23 Mar 2026 23:15:00 +0000

Job is a medium-difficulty Windows machine on VulnLab. The attack chain involves crafting a malicious LibreOffice macro sent via SMTP to gain an initial foothold, then escalating to SYSTEM by abusing SeImpersonatePrivilege with GodPotato.

Cicada — HackTheBox Writeup

Mon, 12 Jan 2026 12:33:00 +0000

An easy-rated HTB Active Directory machine. The attack chain involves SMB guest enumeration, RID brute-forcing, password spraying, LDAP dumping, and finally abusing SeBackupPrivilege to extract the Administrator hash.

Media - VulnLab Writeup

Sun, 11 Jan 2026 12:33:00 +0000

Exploiting a .wax file upload to steal NTLMv2 credentials, then escalating privileges via SeImpersonate using GodPotato on a Windows target.

UpDown - HackTheBox Writeup

Fri, 09 Jan 2026 23:42:00 +0000

UpDown is a medium Linux box where you chain an exposed .git repo, a custom header bypass, and a Phar wrapper LFI + file upload to get a shell. Root involves Python 2 input() injection on a SUID binary, then easy_install sudo abuse via GTFOBins.

Busqueda — HackTheBox Writeup

Thu, 08 Jan 2026 11:57:00 +0000

A walkthrough of HackTheBox Searcher — exploiting CVE-2023-43364 (Searchor 2.4.0 RCE) for initial access, then leveraging a path injection vulnerability in a privileged Python script to escalate to root.

Introduction

Mon, 08 Jun 2020 08:06:25 +0600

Hi, I’m Nitel 👋

Application Security & Penetration Testing Specialist based in Seoul, South Korea.

I write about offensive security, penetration testing, and the intersection of secure development — from breaking things in labs to building them the right way in production.

What I Do

I’m an offensive security professional with a background in full-stack development (React.js / Node.js). I hold the HTB Certified Penetration Testing Specialist (CPTS) and PJPT certifications, and I’m currently pursuing OSCP.

Go বেসিক

Mon, 01 Jan 0001 00:00:00 +0000

Introduction

Mon, 01 Jan 0001 00:00:00 +0000

Hello World

A sample go program is show here.

package main

import "fmt"

func main() {
  message := greetMe("world")
  fmt.Println(message)
}

func greetMe(name string) string {
  return "Hello, " + name + "!"
}

Run the program as below:

$ go run hello.go

Variables

Normal Declaration:

var msg string
msg = "Hello"

Shortcut:

msg := "Hello"

Constants

const Phi = 1.618

Basic Types

Mon, 01 Jan 0001 00:00:00 +0000

Strings

str := "Hello"

Multiline string

str := `Multiline
string`

Numbers

Typical types

num := 3          // int
num := 3.         // float64
num := 3 + 4i     // complex128
num := byte('a')  // byte (alias for uint8)

Other Types

var u uint = 7        // uint (unsigned)
var p float32 = 22.7  // 32-bit float

Arrays

// var numbers [5]int
numbers := [...]int{0, 0, 0, 0, 0}

Pointers

func main () {
  b := *getPointer()
  fmt.Println("Value is", b)

func getPointer () (myPointer *int) {
  a := 234
  return &a

a := new(int)
*a = 234

Pointers point to a memory location of a variable. Go is fully garbage-collected.

অ্যাডভান্সড

Mon, 01 Jan 0001 00:00:00 +0000

Flow Control

Mon, 01 Jan 0001 00:00:00 +0000

Condition

if day == "sunday" || day == "saturday" {
  rest()
} else if day == "monday" && isTired() {
  groan()
} else {
  work()
}

if _, err := doThing(); err != nil {
  fmt.Println("Uh oh")

Switch

switch day {
  case "sunday":
    // cases don't "fall through" by default!
    fallthrough

  case "saturday":
    rest()

  default:
    work()
}

Loop

for count := 0; count <= 10; count++ {
  fmt.Println("My counter is at", count)
}

entry := []string{"Jack","John","Jones"}
for i, val := range entry {
  fmt.Printf("At position %d, the character %s is present\n", i, val)

n := 0
x := 42
for n != x {
  n := guess()
}

File Manipulation

Mon, 01 Jan 0001 00:00:00 +0000

Condition

if day == "sunday" || day == "saturday" {
  rest()
} else if day == "monday" && isTired() {
  groan()
} else {
  work()
}

if _, err := doThing(); err != nil {
  fmt.Println("Uh oh")

Bash Variables

Mon, 01 Jan 0001 00:00:00 +0000

Variable

NAME="John"
echo $NAME
echo "$NAME"
echo "${NAME}

Condition

if [[ -z "$string" ]]; then
  echo "String is empty"
elif [[ -n "$string" ]]; then
  echo "String is not empty"
fi

Nitel's Red Logs

Job — VulnLab Writeup

Cicada — HackTheBox Writeup

Media - VulnLab Writeup

UpDown - HackTheBox Writeup

Busqueda — HackTheBox Writeup

Introduction

Hi, I’m Nitel 👋

What I Do

Go বেসিক

Introduction

Hello World

Variables

Constants

Basic Types

Strings

Numbers

Arrays

Pointers

অ্যাডভান্সড

Flow Control

Condition

Switch

Loop

File Manipulation

Condition

Bash Variables

Variable

Condition

Go এর নোট সমূহ

Go Notes

নোট সমূহ

ব্যাশের নোট সমূহ

Bash Notes