forensics/hidden_in_plain_sight

forensics/hidden_in_plain_sight/flag.txt

@@ -0,0 +1 @@
+picoCTF{h1dd3n_1n_1m4g3_92f08d7c}

forensics/hidden_in_plain_sight/solve.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p mediainfo jq gnused steghide
+
+steghide_password="$(mediainfo --Output=JSON img.jpg | jq -r '.media.track[0].Comment' | base64 -d | sed 's/steghide://' | base64 -d)"
+
+steghide extract --stegofile img.jpg --passphrase "$steghide_password"
+