"00:00 / <minutes>:<seconds>" youtube

Google that, including the quotes, replace the minutes and seconds with your given time, then look through the results and find a URL which fits the password criteria.

Every result should be a video with that duration. If it isn't, check your useragent. I noticed some weirdness with that.