Tags: ritsecctf ritsec stego
Rating:
# Challenge
Note: This challenge builds off of [Inception CTF: Dream 3](https://github.com/AsapZulu1/CTF-writeups/blob/main/RITSEC-CTF-2021/FORENSICS/Inception%20CTF:%20Dream%203/Challenge%20and%20writeup.md).
Don’t lose yourself within the dreams, it’s critical to have your totem. Take a close look at the facts of the file presented to you. Please note the flag is marked with an “RITSEC=” rather than {} due to encoding limitations.
The flag will need to be converted to RITSEC{}
# Solution
The password from the flag in [Inception CTF: Dream 3](https://github.com/AsapZulu1/CTF-writeups/blob/main/RITSEC-CTF-2021/FORENSICS/Inception%20CTF:%20Dream%203/Challenge%20and%20writeup.md) was used to extract files from SnowFortress.7z.
Extracted files:
* Limbo.7z
* PasswordPath.exe
I noticed that there were something strange with the name of the .exe.
I extracted strings in terminal using the strings command. The last part of the output was:
> Wait a minute, whose subconscious are we going into, exactly? {dnalmaerD}CESTIR
This string is known from [Inception CTF: Dream 1](https://github.com/AsapZulu1/CTF-writeups/blob/main/RITSEC-CTF-2021/FORENSICS/Inception%20CTF:%20Dream%201/Challenge%20and%20writeup.md). So that would likely not be the flag fort this challenge. This was in the output over the mentioned line:
> `Very long line. Read the writeup on GitHub for the intire line.`
The output was a html-code with an incorporated morse-code:
> `-.. .-. . .- -- ...`
>
> `..-. . . .-..`
>
> `.-. . .- .-..`
>
> `.-- .... . -.`
>
> `.-- . .----. .-. .`
>
> `.. -.`
>
> `- .... . -- .-.-.-`
>
> `.. - .----. ...`
>
> `--- -. .-.. -.--`
>
> `.-- .... . -.`
>
> `.-- .`
>
> `.-- .- -.- .`
>
> `..- .--.`
>
> `- .... .- -`
>
> `.-- .`
>
> `.-. . .- .-.. .. --.. .`
>
> `... --- -- . - .... .. -. --.`
>
> `.-- .- ...`
>
> `.- -.-. - ..- .- .-.. .-.. -.--`
>
> `... - .-. .- -. --. . .-.-.-`
>
> `.-. .. - ... . -.-. -...- -.. .. ...- . .-. ... .. --- -. `
Decoded using [CyberChef](https://gchq.github.io/CyberChef/) and got this as output:
> DREAMS FEEL REAL WHEN WE'RE IN THEM. IT'S ONLY WHEN WE WAKE UP THAT WE REALIZE SOMETHING WAS ACTUALLY STRANGE. RITSEC=DIVERSION
>
I converted the flag from RITSEC=DIVERSION to RITSEC{DIVERSION} as instructed in the challenge.
Flag:
>RITSEC{DIVERSION}
>
...to be continued in [Inception CTF: Dream 5](https://github.com/AsapZulu1/CTF-writeups/blob/main/RITSEC-CTF-2021/STEGO/Inception%20CTF:%20Dream%205/Challenge%20and%20writeup.md)
