Forest

Personal Rating: Medium

We have an image of a forest. If you look at it closely, you can see the text "IsJuS1Af0r3sTbR0" in the picture very lightly. This is not the flag.

Once I got stuck here I had to look for a hint online.

I found out that there is the program steghide, which can be used to embed and extract data from images. Using the string found before as password, I could extract the flag from the image with this command: steghide extract -p 'IsJuS1Af0r3sTbR0' -sf forest.jpg

The resulting file was called nothinghere.txt and contained the flag in encoded format:

UGO{NzNm1aTfXvyYmMOe0}

This was just ROT13 "encrypted", so I reversed that and got the flag.