I will solve the You Cant C Me challenge from HackTheBox

Untitled

let’s download the binary and run file against it!

Untitled

it’s a normal 64-bit ELF nothing special there!

now lets run it!

Untitled

Notice please that we need to enter a input there!

let’s decompile the binary using ghidra!

Untitled

Please notice that our input is compared using strcmp!

that mean if we are able to debug the application we will see the plaintext password!

so we will use ltrace for that

ltrace ./auth

Untitled

Please notice that the string that is getting compared to out input showed in plaintext!