Rating:

## [See original writeup on site](https://barelycompetent.dev/post/ctfs/2021-04-11-ritsecctf/#inception-ctf-dream-2)

### Inception CTF: Dream 2
> Note: This challenge builds off Inception CTF: Dream 1,
>
> Unfortunately, the subconscious isn’t enough for this mission, we have to kidnap Fischer we need to go further into the system of the mind. Use the flag found to edit the PowerShell script, entering the Flag in line three in-between the single quotes. Run the PowerShell script and wait for it to complete its actions.
>
> Thanks to SRA for providing this challenge!

From the previous challenge, we know the password for the Van chase zip file for this challenge round is `Dreamland`.

As such, we can extract the level's challenge folder now:

```bash
7z x VanChase.7z

7-Zip [64] 16.02 : Copyright (c) 1999-2016 Igor Pavlov : 2016-05-21
p7zip Version 16.02 (locale=en_US.UTF-8,Utf16=on,HugeFiles=on,64 bits,32 CPUs AMD Ryzen 9 3950X 16-Core Processor (870F10),ASM,AES-NI)

Scanning the drive for archives:
1 file, 159864 bytes (157 KiB)

Extracting archive: VanChase.7z

Enter password (will not be echoed): <enter "Dreamland">
--
Path = VanChase.7z
Type = 7z
Physical Size = 159864
Headers Size = 264
Method = LZMA2:192k 7zAES
Solid = +
Blocks = 1

Everything is Ok

Files: 3
Size: 159581
Compressed: 159864
```

Which gives us:

```bash
rw-rw-r-- 1 ganondorf ganondorf 1 KiB Wed Feb 24 13:26:42 2021  Kicks.ps1
rw-rw-r-- 1 ganondorf ganondorf 137 B Wed Feb 24 12:42:31 2021  Kidnap.txt
rw-rw-r-- 1 ganondorf ganondorf 154 KiB Wed Feb 24 13:36:06 2021  TheHotel.7z
rw-rw-r-- 1 ganondorf ganondorf 156 KiB Fri Apr 9 18:06:28 2021  VanChase.7z
```

Displaying the text file:

```bash
cat Kidnap.txt
An idea is like a virus, resilient, highly contagious.
52 49 54 53 45 43 7b 57 61 74 65 72 55 6e 64 65 72 54 68 65 42 72 69 64 67 65 7d
```

So, just convert the hex numbers to their ASCII equivalent; can do so [using CyberChef, for example](https://gchq.github.io/CyberChef/#recipe=From_Hex('Auto')&input=NTIgNDkgNTQgNTMgNDUgNDMgN2IgNTcgNjEgNzQgNjUgNzIgNTUgNmUgNjQgNjUgNzIgNTQgNjggNjUgNDIgNzIgNjkgNjQgNjcgNjUgN2Q).

Flag is `RITSEC{WaterUnderTheBridge}`.

Original writeup (https://barelycompetent.dev/post/ctfs/2021-04-11-ritsecctf/#inception-ctf-dream-2).