Lockout Illusion

Challenge Question

A login step asks for a 4-digit one-time code, and the endpoint locks you out after a few wrong attempts. With only 10,000 possible codes, that lockout is the only thing standing between an attacker and the right answer. But the lockout is keyed on something you control. Find a way past it and recover the code. This is a live challenge with its own instance.