Not the Password

Reverse Engineering 200 pts standard

Twist: Hardcoded password is a decoy

Story: The binary prints “Wrong password” even if the string matches.

Given: auth_check

Difficulty: Medium

↓ auth_check

        
          View Hint : Hints

Hints:

Hint 1: The strings command will show you more than one potential password. Don't trust everything you read.

Hint 2: Use a decompiler like Ghidra or Cutter. Look at the main function and follow the arrows in the Graph View.

Hint 3: Just because the code says "Wrong" doesn't mean you didn't find a valid string—it just means you're on the wrong path!