YARA on L3B4nk4https://blog.b4nk4.tech/tags/yara/Recent content from L3B4nk4Hugoen-usAll articles on this blog are licensed under the BY-NC-SA license agreement unless otherwise stated. Please indicate the source when reprinting!Sun, 09 Aug 2026 00:00:00 +0200Tired of Runninghttps://blog.b4nk4.tech/post/tired-of-running/Sun, 09 Aug 2026 00:00:00 +0200https://blog.b4nk4.tech/post/tired-of-running/ Tired of Running

Author: L3B4nk4()

A Go web challenge: a uint16 length-wrap in a custom serializer desynchronizes backend parsing, leading to login bypass, osquery table abuse, inline YARA credential leakage, and a final internal request-splitting trick to recover the flag.

Published on 2026-08-09 at L3B4nk4, last modified on 2026-08-09

]]>writeup