Overview
An image named challenge.jpg hides some text.
Reconnaissance
We check the file using steghide which can extract embedded payloads.
Exploitation Strategy
Running steghide extract -sf challenge.jpg with a blank passphrase extracts secret.txt. Inside is a Base64-encoded string, which decodes to the flag.
Solution Code
steghide extract -sf challenge.jpg
# Decodes base64 string inside secret.txt -> STG{W3LL_H0W_WA5_1T}Flag
STG{W3LL_H0W_WA5_1T}