Find The Easy Pass

Platform: HackTheBox | Category: Reversing | Difficulty: Easy | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

Find the password (say PASS) and enter the flag in the form REDACTED

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

1. First, unzip the .zip file given.

2. Let's decompile the .exe in ghidra.

3. Well we have many functions available, it's harder for us to do static reverse engineering.

4. So i used Immunity Debugger.

5. Let's search for strings.

6. Let's take a look on this one.

7. Let's set a breakpoint at this offset by press f2, then run the program.

8. Now we know the correct pass is fortran!

9. Let's run it again but delete the breakpoint first, then enter the pass as fortran!.

10. Got it correctly, hence we got the flag!

Flag

REDACTED

Lessons Learned

1. Identify the weakness from source review or fingerprinting first.
2. Iterate with incremental payloads instead of guessing.
3. Reuse the same pattern in future engagements.