Tags: lsb hidden forensics steghide
Rating: 5.0
The image itself is a hint. Open with 7-Zip to reveal a file. Open that to reveal two more files: flag.jpg and key.png.
key.png circles the last screwhead (or whatever that is) out of 8 screwheads... it also happens to be the smallest. Maybe it's implying Least Significant Bit Steganography?
(I used stegsolve) I spent a while trying to figure out what I could get from flag.jpg with LSB, before trying it on key.png. Using it on key.png with Red 0, Blue 0, and Green 0 all selected, the top of the hex dump includes the following: '[password: uR_aLmOsT_tHeRe]' A password... huh. Steghide is known for using passwords to hide things. Maybe that'll work?
I used [aperisolve.fr](http://) to use steghide, and what do you know, using the password gets us a file flag.txt!
UDCTF{lay3r5_0n_lay3r5}