Rating: 4.0

# runescape-2

## Description

EDIT: An exclamation point made it somewhere in there. It's not a rune, just like how the character ? isn't a rune.
```
bcactf{ᚪᚸᚤᚡᚵᚪᚢᚴᚹᚡᚨᚫᚴᚢᚫᚢᚰᚩᚭᚳᚫ_ᚵᚱᚥᚲᚩᚰᚧᚴᚶᚫᚩᚮᚪᚨᚳᚥᚷᚥᚲᚭᚷᚱᚭ_ᚤᚤᚭᚩᚲᚤᚭᚨᚷᚭᚰᚣᚪᚷᚴᚲᚪᚣᚳᚸᚷᚣᚷᚪᚶᚦᚩᚬᚨᚮᚳᚤ_ᚮᚥᚨᚰᚭᚱᚸᚩᚵᚢᚶᚲᚴᚹᚷᚬᚭᚫᚩᚪᚬᚵᚬᚩᚭᚮᚥᚡᚩᚥᚭᚠ_ᚶᚵᚴᚭᚧᚳᚤᚩᚤᚵᚴᚨᚧᚡᚶᚵᚪᚶᚰᚧᚶᚫᚰᚸᚴᚪᚷᚩᚶ_ᚫᚭᚹᚲᚲᚷᚱᚲᚷᚮᚥᚨᚠᚨᚷᚴᚢᚫᚢᚥᚷᚥ_ᚦᚫᚢᚴᚢᚶᚪᚤᚷᚰᚭᚳᚢᚴᚣᚳᚵᚭᚱ_ᚬᚨᚮᚸᚤᚮᚳᚩᚤᚵᚲᚨᚲᚵᚱᚥᚹᚪᚵᚷ_ᚬᚨᚮᚸᚤᚮᚳᚩᚤᚵᚹᚠᚨᚲᚤᚵᚪᚩᚦᚵᚬᚮᚠᚸᚭᚡᚩᚢᚮᚥᚨ_ᚦᚫᚢᚴᚢᚶᚪᚤᚷᚰᚫᚸᚧᚴᚣᚳᚵᚹᚢᚷ_ᚦᚫᚢᚴᚢᚶᚪᚤᚷᚰᚲᚸᚵᚦᚵᚳᚴᚣᚠᚢ_ᚦᚫᚢᚴᚢᚶᚪᚤᚷᚰᚹᚫᚡᚸᚱᚱᚦᚪᚵᚬᚮᚷᚱᚤᚸᚠᚪᚭ_ᚨᚴᚲᚧᚲᚧᚡᚤᚩᚦᚨᚦᚡᚪᚲᚲᚡ_ᚫᚢᚥᚢᚶᚦᚥᚲᚧᚸᚢᚷᚵᚵᚲᚴ_ᚭᚪᚴᚲᚪᚨᚬᚠᚤᚸᚨᚷᚱᚳ_ᚢᚷᚥᚸᚣᚡᚧᚡᚭᚵᚪᚢᚷᚪᚢᚮᚭᚰᚤ_ᚲᚳᚪᚤᚲᚢᚴᚯᚸᚳᚢᚳᚵᚤᚸ_ᚰᚦᚠᚲᚭᚷᚷᚣᚬᚲᚹᚹᚸᚧᚴᚴᚧᚮᚪᚠᚢ_ᚸᚧᚬᚵᚸᚧᚮᚴᚲᚰᚮ_ᚤᚡᚡᚲᚹᚷᚦᚡᚷᚹᚷᚸᚭᚬᚠ_ᚤᚪᚲᚲᚫᚬᚠᚴᚭᚶᚶᚷᚨᚬᚱᚡᚰᚨᚸ_ᚴᚪᚱᚩᚭᚰᚳᚯᚦᚸᚢᚷᚢᚥᚨᚦᚠ_ᚨᚱᚹᚨᚳᚥᚧᚰᚩᚯᚰᚵᚱᚫᚢ_ᚩᚵᚲᚴᚳᚯᚦᚸᚳᚢᚴᚲᚳᚪᚭᚱᚨᚩ_ᚷᚧᚤᚥᚤᚰᚷᚲᚧᚭᚫᚣᚰᚢᚢᚹᚭᚦᚱᚰᚨ_ᚹᚭᚤᚱᚧᚸᚦᚲᚸᚳᚣᚮᚦᚢᚨᚲ_ᚯᚱᚳᚷᚪᚤᚩᚷᚲᚫᚸᚳᚷᚨᚠᚦᚥᚣᚫᚫ_ᚦᚥᚱᚫᚦᚤᚫᚥᚣᚪᚯᚧᚷᚨᚳᚷᚢᚢᚨᚲᚷᚱᚳᚵᚢᚴᚲᚠᚹᚡᚸᚴᚸᚹᚪᚵᚷᚴᚶᚫᚭᚧᚢᚨᚷᚷᚸᚭᚰᚨᚮᚥᚡᚫᚢᚸᚲᚢᚹ_ᚥᚬᚬᚡᚧᚮᚱᚥᚮᚨᚲᚰᚳᚴᚢᚪᚰᚴᚶᚦᚥᚭᚧᚱᚩ_ᚫᚭᚴᚠᚶᚫᚨᚱᚹᚨᚳᚢᚥᚣᚡᚯᚮ_ᚧᚷᚤᚢᚨᚮᚰᚦᚲᚧᚴᚡᚸᚵᚲ_ᚨᚦᚤᚷᚲᚭᚭᚵᚥ_ᚴᚵᚰᚡᚸᚲᚡᚰᚤᚣᚭᚦᚣᚸᚨ_ᚲᚨᚩᚷᚢᚢᚤᚨᚱᚰᚬᚨᚸᚷᚣᚪ_ᚧᚡᚣᚪᚲᚨᚸᚫᚠᚬᚳᚣᚱᚳᚯ_ᚢᚪᚨᚠᚢᚲᚶᚵᚴᚭᚧᚳᚤᚩᚤᚵᚥᚸᚫ_ᚣᚴᚣᚫᚪᚬᚲᚫᚣᚠᚵᚲᚭᚱᚡᚬᚲ_ᚱᚴᚫᚲᚭᚡᚷᚢᚢᚤᚨᚱᚰᚬᚨᚸᚷᚣᚪ_ᚪᚰᚳᚫᚵᚱᚥᚢᚠᚦᚵᚦᚠᚰᚤᚡᚲᚰᚪᚦᚵᚷ_ᚸᚪᚲᚨᚲᚤᚴᚨᚲᚥᚸᚫᚷᚡᚡ_ᚰᚲᚮᚴᚭᚱᚳᚯᚠᚱᚭᚪᚸᚸᚴᚣᚯᚲᚶ_ᚭᚰᚳᚥᚩᚲᚫᚸᚫᚡᚧ_ᚤᚡᚱᚴᚡᚨᚪᚲᚶ_ᚰᚤᚧᚪᚴᚡᚨᚧᚲᚭᚸᚫᚢᚪᚱᚤᚣᚡᚮᚥᚸᚢᚷᚹᚩᚶᚫᚤ_ᚬᚧᚴᚤᚡᚱᚤᚰᚭᚳᚦ_ᚳᚪᚱᚢᚴᚲᚴᚸᚵᚸ_ᚭᚸᚳᚨᚮᚥᚨᚪᚯᚲᚠᚲᚨᚳᚢ_ᚹᚴᚣᚣᚵᚱᚥᚩᚣᚥᚸᚬᚨᚯᚭ_ᚳᚥᚰᚪᚬᚵᚴᚸᚢᚲᚸᚪᚠ_ᚨᚸᚲᚴᚹᚬᚭᚮᚢᚨᚠᚷᚴᚡᚸᚯᚪᚱᚭᚵᚢᚮᚥᚨᚪᚫᚹᚮᚡᚫᚢᚨᚥᚬᚸᚨᚫᚷᚣᚧᚵᚢᚨᚵᚹᚸᚭᚧᚡᚫᚪᚰᚷᚢᚫᚭᚩᚴᚪᚨᚤᚷᚴᚭᚭᚭ_ᚮᚥᚡᚵᚷᚡᚴᚭᚦᚫᚬᚭᚲᚰᚲᚪᚵᚲᚴᚬᚨᚮᚴᚷᚸᚣᚳᚴᚸᚲᚡᚸᚤᚨᚤᚭᚷᚴᚣᚰᚬᚨᚩᚩᚦᚶᚪᚴ_ᚶᚫᚵᚥᚡᚠᚡᚰᚥᚯᚡᚲᚣᚴᚣᚱᚪᚰᚶᚰᚹᚵᚸᚤᚭᚶᚶᚷᚷᚭᚰ_ᚳᚲᚷᚮᚳᚦᚤᚫᚭᚦᚸᚯᚳᚩᚮᚷᚤᚴᚨᚪᚫᚶᚶᚰᚠᚳᚪᚩᚣ_ᚡᚨᚷᚧᚷᚨᚩᚷᚪᚢᚦᚳᚠᚡᚪᚱᚩᚰᚴᚠᚹᚭᚪᚵᚵᚩᚩᚰᚴᚡᚸᚨᚫᚳᚸᚤᚡᚱᚠᚢᚡᚷ_ᚲᚨᚩᚠᚪᚭᚸᚫᚨᚲᚮᚴᚢᚬᚷᚱᚨᚢᚳᚫᚦᚮᚨᚷᚥᚰᚴᚬᚣᚲᚣᚡᚲᚬᚷᚷᚴᚢᚪᚲᚰᚠᚱᚢ_ᚰᚴᚵᚴᚰᚷᚲᚧᚭᚫᚢᚴᚵᚴᚰᚷᚲᚧᚭᚫᚢᚴᚵᚴᚹᚷᚬᚨᚮᚩᚦᚶᚪᚴᚹᚷᚸᚤᚡ_ᚷᚳᚴᚥᚨᚴᚠᚬᚨᚹᚷᚢᚪᚪᚶᚫᚲᚰᚯᚵᚧᚷᚵᚨᚴᚶᚵᚸᚧᚵᚫᚨᚥᚮᚢ_ᚰᚫᚩᚴᚵᚴᚤᚵᚲᚹᚨᚡᚸᚳᚩᚠᚢᚰᚫᚢᚹᚲᚰᚧᚷᚨᚳᚲᚵᚵᚨᚡᚬᚦᚷᚰᚩᚰᚧ_ᚵᚣᚵᚸᚹᚭᚰᚶᚬᚲᚦᚩᚰᚩᚡᚡᚵᚴᚱᚲᚴᚲᚥᚰᚧᚵᚴᚲᚪᚵᚯᚸᚨᚭᚢᚱᚥᚷ!_ᚵᚲᚹᚨᚳᚯᚭᚦᚤᚸᚪᚵᚬᚮᚳᚮᚭᚲᚳᚢᚥᚱᚲᚨᚸᚭᚳᚲᚰᚨᚱᚵᚵᚨ_ᚲᚣᚴᚢᚨᚳᚤᚥᚭᚥᚬᚫᚴᚲᚤᚩᚦᚴᚡᚨᚵᚸᚧᚡᚳᚲᚢᚩᚲᚶᚳᚮᚶᚵᚪᚦᚤᚴᚡᚨᚰᚲᚯᚡ_ᚢᚷᚮᚧᚰᚹᚢᚣᚱᚥᚰᚢᚴᚲᚹᚨᚯᚲᚨᚱᚱᚦᚪᚷᚶᚦᚷᚬᚭᚧᚤᚲ_ᚨᚦᚷᚣᚴᚣᚡᚸᚢᚦᚬᚪᚢᚰᚳᚡᚸᚣᚨᚡᚱᚵᚴᚠᚯᚲᚨᚩᚰᚶᚪᚷᚠᚠᚫᚱᚭᚭᚵᚸᚰᚳᚹᚹ_ᚷᚲᚥᚱᚷᚡᚨᚲᚥᚣᚨᚸᚷᚵᚩᚷᚩᚥᚹᚪᚫᚲᚸᚸᚢᚪᚭᚫᚡ_ᚤᚸᚯᚶᚵᚪᚶᚪᚵᚹᚫᚫᚭᚱᚴ_ᚢᚷᚱᚱᚦᚨᚣᚱᚧᚰᚠᚣᚨᚷᚥᚹᚭᚩᚴᚴᚰ_ᚢᚵᚥᚴᚸᚵᚸᚭᚧᚱᚷᚥᚷᚰᚭᚸᚬᚨᚭᚧᚠᚹᚴᚶᚦᚧᚰᚹ_ᚱᚸᚪᚭᚷᚥᚣᚰᚠᚴᚡᚹᚠᚤᚸᚰᚧᚸᚫᚱᚫᚬᚡᚰᚧ_ᚶᚤᚸᚯᚵᚡᚨᚡᚮᚥᚨᚪᚧᚰᚬᚡᚸᚵᚱᚩᚶᚦᚵᚸᚮᚦᚴᚲᚰᚤᚴᚶᚫᚱᚨᚩᚨᚲᚶᚢᚭᚠᚨᚷᚳᚲᚹ_ᚦᚦᚥᚬᚹᚨᚸᚴᚩᚧᚮᚦᚢᚨᚭᚯᚠᚴᚧᚳᚵᚱᚸᚫᚨᚵᚰᚤᚡᚰᚶᚥᚷᚩᚠᚯᚮᚢᚱᚩᚢᚷᚨᚦᚨᚧᚰᚬᚡᚩᚳ_ᚨᚮᚰᚦᚰᚸᚴᚪᚠᚪᚭᚢᚴᚣᚴᚦᚥᚦᚷᚸᚧᚨᚬᚫᚫᚱᚢᚫᚩᚪᚬᚴᚡᚨᚴᚯᚠᚡᚩᚥᚸᚥᚨᚦᚠᚲᚨᚩ_ᚷᚴᚰᚷᚴᚦᚫᚸᚠᚰᚠᚴᚸᚳᚳᚲᚪᚸᚯᚵᚪᚡᚦᚡᚢᚫᚭᚩᚴᚸᚢᚠᚤᚣᚨᚲᚲᚪᚳᚢᚰᚢᚨᚤᚢᚴᚭᚢᚴᚢᚫ_ᚰᚪᚮᚭᚠᚧᚷᚪᚡᚧᚪᚸᚲᚴᚶᚸᚯᚫᚥᚫᚢᚲᚵᚹᚹᚲᚬᚷᚡᚱᚪᚯᚲᚹᚲ_ᚪᚸᚯᚵᚪᚡᚦᚡᚢᚫᚭᚩᚴᚸᚢᚠᚤᚣᚨᚲᚲᚪᚳᚢᚰᚢᚨᚤᚢᚴᚭᚢᚴᚢᚫ_ᚦᚶᚲᚴᚪᚭᚶᚪᚡᚹᚪᚩᚵᚲᚴᚵᚵᚭᚪᚨᚷᚲ_ᚵᚠᚫᚬᚮᚥᚵᚪᚥᚴᚴᚠᚧᚫᚫᚡᚲᚰᚪᚣᚩᚢᚨᚠ_ᚬᚠᚪᚨᚢᚶᚥᚫᚠᚲᚬᚠᚵᚵᚢᚧᚷᚭᚰᚷᚰᚹ_ᚣᚨᚠᚴᚨᚥᚣᚨᚮᚲᚲᚳᚰᚴᚥᚤᚧᚴᚮᚡᚲᚨᚷᚦᚴᚭᚦᚭᚠ_ᚡᚧᚤᚩᚩᚲᚢᚴᚬᚰᚮᚢᚱᚪᚯᚲᚱᚠᚧᚡᚡᚲᚧᚷᚭᚱᚣᚪᚭᚨᚧᚷᚨᚵᚤᚸᚢᚪᚥᚩᚱᚥᚵᚴᚥᚷᚥ_ᚸᚠᚰᚨᚸᚵᚷᚪᚸᚦᚩᚠᚩᚮᚮᚫᚰᚪᚮᚭᚠᚧᚷᚪᚡᚧᚪᚸᚲᚴᚶᚸᚯᚫᚥᚫᚢᚲᚵᚹᚹᚲᚬᚷᚡᚱᚪᚯᚲᚹᚲ_ᚳᚦᚳᚲᚴᚷᚪᚩᚷᚣᚴᚩᚧᚵᚪᚸᚴᚱᚶᚤᚩᚬᚨᚰᚨᚵᚲᚦᚹᚣᚵᚮᚥᚡᚪᚩᚦᚲᚹᚭᚡᚰᚮᚲᚹᚠᚤᚸ_ᚶᚮᚭᚯᚧᚲᚨᚷᚦᚤᚷᚮᚡᚱᚦᚴᚭᚷᚹᚥᚨᚴᚠᚶᚴᚰᚳᚲᚪᚴᚡᚡᚨᚥᚮᚴᚰᚨᚥᚢᚴᚹᚳᚨᚴᚪᚳᚯᚪᚢᚠᚡᚬᚵ_ᚡᚧᚤᚩᚩᚲᚢᚴᚬᚰᚮᚢᚰᚪᚭᚮᚡᚷᚳᚦᚲᚭᚵᚣᚪᚳᚱᚱᚡᚰᚷᚸᚢᚷᚭᚷᚥᚨᚡᚫᚤᚵᚪᚩᚦᚵᚬᚮᚬᚸᚳᚷ_ᚷᚴᚰᚷᚴᚦᚫᚸᚠᚰᚠᚴᚸᚳᚳᚲᚪᚸᚯᚵᚪᚡᚦᚡᚢᚫᚭᚩᚴᚸᚢᚠᚤᚣᚨᚲᚲᚪᚳᚢᚰᚢᚨᚤᚢᚴᚭᚢᚴᚢᚫ_ᚰᚪᚮᚭᚠᚧᚷᚪᚡᚧᚪᚸᚲᚴᚶᚸᚯᚫᚥᚫᚢᚲᚵᚹᚹᚲᚬᚷᚡᚱᚪᚯᚲᚹᚲ_ᚬᚸᚳᚷᚧᚪᚸᚲᚴᚶᚸᚯᚷᚵᚩᚷᚷᚪᚰᚦᚧᚰᚬᚡᚩᚳ_ᚵᚲᚵᚣᚴᚡᚠᚤᚨᚣᚰᚢᚢᚹᚷᚲᚨᚠᚪᚳᚷᚱᚰᚪᚲᚮᚡᚰᚨᚡᚰᚬᚢᚪᚯ_ᚦᚳᚲᚠᚪᚭᚪᚢᚡᚡᚨᚴᚴᚳᚳ_ᚴᚲᚲᚷᚵᚸᚢᚥᚰᚣᚮᚤᚶᚦᚠᚮᚱᚢᚨᚳᚷ_ᚥᚯᚡᚬᚮᚥᚱᚰᚳᚪᚷᚭᚠᚥᚣᚵᚵᚩᚩᚰᚧ_ᚰᚲᚠᚤᚵᚬᚢᚥᚢᚪᚩᚱᚥᚧᚫᚷᚫᚴᚩᚶᚩᚡᚷᚭᚦᚩ}
```
NOTE: This problem does not share a key with runescape-1.

## Solution

Like runescape-1, there are 26 shapes of runes. One for each lowercase letter.

In the first hint, the crib is ```werenostrangerstolove_youknow```, it's the lyrics of legendary [Never gonna give you up](https://www.youtube.com/watch?v=dQw4w9WgXcQ).

The lyrics until first chorus ends have a perfect match in the length with the encrpyted message, so I extended the crib to:

```
werenostrangerstolove_youknowtherulesandsodoi_afullcommitmentswhatimthinkingof_youwouldntgetthisfromanyotherguy_ijustwannatellyouhowimfeeling_gottamakeyouunderstand_nevergonnagiveyouup_nevergonnaletyoudown_nevergonnarunaroundanddesertyou_nevergonnamakeyoucry_nevergonnasaygoodbye_nevergonnatellalieandhurtyou_
```

I noticed that the first, fourth, and fifth ```nevergonna``` are all encoded to ```wjfgfsacuk``` (or ```ᚦᚫᚢᚴᚢᚶᚪᚤᚷᚰ``` in the rune).

The first and fourth are separated by 70 words (not counting ```_```), and the fourth and fifth are separeted by 20 words.

So the key is likely be 10 words long.

I recorded 10 mapping of the encrpyted characters to crib characters in the [script](runescape-2.py).

And after the crib, I recovered the characters that have mapping beforehand. The rest are replaced by ```?```.

After first run, the output is: (after the crib)

```
?tslateand??awa?e_starin?att?ewal?_o?e?u?my??ndow_?ea??allsoutthedo?r_.......
```

Google that, the next song is famous meme [shooting star](https://www.youtube.com/watch?v=HrO9-j_zALg).

Fill in the length-matching lyrics again, and fill in the unknown words until all ```?``` are gone.

The lyrics including [It's Muffin Time!](https://www.youtube.com/watch?v=cGzujGfXrlI), [SOS](https://www.youtube.com/watch?v=kBU3RuqQkns). And the other can be judged by the context.

After all time-consuming work, I finally got the flag:

```
bcactf{werenostrangerstolove_youknowtherulesandsodoi_afullcommitmentswhatimthinkingof_youwouldntgetthisfromanyotherguy_ijustwannatellyouhowimfeeling_gottamakeyouunderstand_nevergonnagiveyouup_nevergonnaletyoudown_nevergonnarunaroundanddesertyou_nevergonnamakeyoucry_nevergonnasaygoodbye_nevergonnatellalieandhurtyou_itslateandimawake_staringatthewall_openupmywindow_headfallsoutthedoor_nooneelsearound_andashimmertakesmyeye_iliftmyhead_blindedbythesky_feelmyweightinfront_followingthesound_movesawaysofast_fallingtotheground_iknowwhatismoretocome_jumpbacktomyfeet_nowionlyseeaheadofme_chasingdownthestreetdownthestreetdownthestreetdownthestreet_givemylovetoashootingstar_butshemovessofast_thaticantkeepup_imchasing_haaaaaimamuffin_anditsmuffintime_whowantsamuffin_pleaseijustwannadie_heysomebodykillme_pleaseitsmuffintime_haveyouhadamuffintoday_iwannadiediedie_trytofindawordtosay_itsallmagic_alltheway_makethelaststepworththeclimb_itsallmagic_allthetime_stopyoursadness_stopyourmadness_automatically_prettysureatthispointyourequestioningmymusictastesoonemorelefttogo_thenextoneisntreallymusicbutitllbefuntofindright_heyheylookatheylookatmerightnow_iamgoingonanadventurebymyself_andthentheniwillnotstopfornothingatallyeah_andyoudbetterbelievecuzigotnothinbettertodah_whatwhatisthatwhatisthatthingrightthere_ishouldinvitehimtocomewithmetospace_wereoffwerereadytogettothespacerightnow_comewithmemyfriendletsgotofreakinspace!_wereinspaceanditsnotapleasantplace_theresnooxygenandthemeteorsllhityouintheface_heywatchouttheresanalieninhiscar_ifyouhithimhewillyellatusandthensueusincourt_hahailiedonemoreforrealthough_canyouhearmesos_helpmeputmymindtorest_twotimescleanagainimactinlow_apoundofweedandabagofblow_icanfeelyourlovepullinmeupfromtheundergroundand_idontneedmydrugswecouldbemorethanjustparttimelovers_icanfeelyourtouchpickinmeupfromtheundergroundand_idontneedmydrugswecouldbemorethanjustparttimelovers_wecouldbemorethanjustparttimelovers_wecouldbemorethanjustparttimelovers_igetrobbedofallmysleep_asmythoughtsbegintobleed_idletgobutidontknowhow_yeahidontknowhowbutineedtonow_icanfeelyourlovepullinmeupfromtheundergroundand_idontneedmydrugswecouldbemorethanjustparttimelovers_icanfeelyourtouchpickinmeupfromtheundergroundand_idontneedmydrugswecouldbemorethanjustparttimeloversayy_icanfeelyourtouchpickinmeupfromtheundergroundandyeah_idontneedmydrugswecouldbemorethanjustparttimelovers_wecouldbemorethanjustparttimelovers_yeahmorethanmorethanlovers_wecouldbemorethanjustparttimelovers_canyouhearmesos_helpmeputmymindtorest_okaythatsenoughfornow_asdffkhgshjfgkjhsdfkjahsgd}
```

Original writeup (https://github.com/kuruwa2/ctf-writeups/tree/master/BCACTF/runescape-2).