# Hidden in plain sight (ft steghide)

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1765482578770/5b0e03bd-097a-417e-aabe-05c231cec562.png align="center")

same checked the meta data and one code looked like `base64` and that gave a strange thing

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1765482628496/b4d0555e-bdc4-4391-9a15-04febd0bb350.png align="center")

steghide:cEF6endvcmQ=  
see here it can be divided into again two parts steghide and this is also `base64`

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1765482681942/51ba9371-1b0a-41b0-b551-439a97cd344b.png align="center")

now in internet I get to know about steghide which is a stenography tool

`steghide` hides or extracts **data inside images/audio** using steganography  
Common in CTFs with `.jpg`, `.jpeg`, `.bmp`, `.wav`

to extract the data we need to provide the password which we got in the comment as `base64` string

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1765482834731/4ab171ee-9f59-4779-b214-1f56c99ae8db.png align="center")

and got the flag in the text file

picoCTF{h1dd3n\_1n\_1m4g3\_2ac27d95}