Find The Easy Pass
Find The Easy Pass
Platform: HackTheBox | Category: Reversing | Difficulty: Easy | Author: D3v0o0Nu11 | Date: 2026-02-10
Description
Find the password (say PASS) and enter the flag in the form REDACTED
Solution Approach
Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.
Steps
-
First, unzip the
.zipfile given. -
Let us decompile the
.exein ghidra. -
Well we have many functions available, it's harder for us to do static reverse engineering.
-
So i used Immunity Debugger.
-
Let us search for strings.
-
Let us take a look on this one.
-
Let us set a breakpoint at this offset by press
f2, then run the program. -
Now we know the correct pass is
fortran! -
Let us run it again but delete the breakpoint first, then enter the pass as
fortran!. -
Got it correctly, hence we got the flag!
Flag
REDACTED
Lessons Learned
- Identify the weakness from source review or fingerprinting first.
- Iterate with incremental payloads instead of guessing.
- Reuse the same pattern in future engagements.