The file program.deb is a Debian package. If you inspect it, you'll find it installs , a popular tool for hiding data in images. 4. Crack the Password
"TFTPADRESSSTRATAGEMSKIPPED" → Decodes to: TFTP ADRESS STRATAGEM SKIPPED 24500.rar
The hint "DUEDILIGENCE" from the plan file is the . 5. Extract the Flag Apply steghide to the exported images using the passphrase: steghide extract -sf picture3.bmp -p DUEDILIGENCE Use code with caution. Copied to clipboard The file program
This will output a file (often named flag.txt ) containing the flag: picoCTF{h1dd3n_1n_pLa1n_51GHT_183759ad} you'll find it installs