Ainsley Woo - Hack the Threat | Cybersecurity Portfolio

Objective

Extract the hidden flag from the provided image file using steganography techniques.

Scenario

An informant has sent you an image claiming it contains classified information. The image looks normal, but you suspect there's more than meets the eye. Use forensics tools to reveal the hidden message.

Challenge Files

vacation_photo.png

2.4 MB

Hints

Hint 1

Check the image metadata first - it might contain clues

Hint 2

Try examining the least significant bits of the image

Hint 3

Common steganography tools: steghide, binwalk, exiftool

Hint 4

The password might be hidden in the filename

Spoiler Warning: The solution below contains the complete walkthrough. Try to solve the challenge yourself first!

Solution

This challenge uses LSB (Least Significant Bit) steganography to hide data within an image file.

Step 1: Examine Image Metadata

Use exiftool to check for any hidden metadata in the image.

step-1.sh

exiftool vacation_photo.png

Step 2: Check for Hidden Files

Use binwalk to scan for embedded files within the image.

step-2.sh

binwalk vacation_photo.png
binwalk -e vacation_photo.png

Step 3: Extract Hidden Data

Use steghide with the password found in metadata to extract the hidden message.

step-3.sh

steghide extract -sf vacation_photo.png
# Enter password: summer2024

Step 4: Read the Flag

Open the extracted file to reveal the flag.

Flag

CTF{st3g4n0gr4phy_m4st3r}

Key Learnings

Images can hide data in various ways: metadata, LSB, embedded files

Tools like binwalk, steghide, and exiftool are essential for forensics

Always check file headers and metadata

Steganography is about hiding information in plain sight

Back to All Challenges

Hidden in Plain Sight

Objective

Scenario

Challenge Files

Hints

Solution

Step 1: Examine Image Metadata

Step 2: Check for Hidden Files

Step 3: Extract Hidden Data

Step 4: Read the Flag

Flag

Key Learnings

Solution

Step 1: Examine Image Metadata

Step 2: Check for Hidden Files

Step 3: Extract Hidden Data

Step 4: Read the Flag

Flag

Key Learnings