This API changes password with every request, see if you can find a way to authenticate successfully. There is no need for brute-forcing the authentication with random passwords. However, you may have to try a couple of times the same authentication to get it working... Even if the password is just 1 digit!!!

To start the challenge connect to http://10.0.41.14:1337/. Your timer starts from the first time you connect to the service.