https://app.hackthebox.com/challenges/impossible-password

---

Download the file and test out the program.

Use strings for clues.

Try with the found password.

Use ltrace to observe the file.

The program compares with a random string and exits. We see that the program holds the time , srand and malloc functions. The string comparison randomly changes by time.

Disassemble

Let’s use a dissembler to explore the program.

Show the main function.

Explore that function.

Go back to the main function and patch the program.

We can see the modifications if we print the main function again.

Test the program and the flag is found.