# Adventure Revisited

Wacky ass challenge lmao

Right so the hint.7z file, when downloaded, isn't actually a 7z file. You can cat it and it's a base64. run base64 -d hint.7z > hint and you'll find it's an image, showing that there is a hidden eval command on the bot.

Running jst eval on the rtcp discord server tells us it can't be run in that guild. We can invite the bot to our own discord server and run the command.

JST eval gives us the ability to run python code on their server.

We can communicate data back to ourselves via a return statement.

The first thing we'll want to do is find some variables. Doing return globals() shows us there's a lot of global variables with a value that's just HIDDEN. Not useful. We can write a simple loop like so

```
JST eval
g = globals()
for key in g:
  if 'rtcp' in g[key]
    return g[key]
```

The output of this script is the string `rtcp{}`. Seems like we're getting somewhere.

Remember: globals gives us variable names and their declared global value. What if instead of printing rtcp{}, we printed the key(variable name), and referenced that?

New script:

```
JST eval
g = globals()
for key in globals:
  if 'rtcp' in g[key]:
    return key
```

Giving us the variable name `fadlgncrjykmbw`

Therefore, we can do

```
JST eval
return fadlgncrjykmbw
```

To return the value at that variable.\
BOOM! Flag acquired.

## Flag: rtcp{1tz\_n0t\_4\_bUg\_1ts\_a\_fe4tur3}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://the-winrars.gitbook.io/writeups/2020-writeups/houseplant/adventure-revisited.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.