Just like the previous challenges we also get an image with a flag hidden inside of it.

A guy snowboarding image given in the challenge

A file command gives us the following:

$ file Snowboard.jpg
Snowboard.jpg: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CTFlearn{CTFIsEasy!!!}", comment: "Q1RGbGVhcm57U2tpQmFuZmZ9Cg==", Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS 6D Mark II, xresolution=138, yresolution=146, resolutionunit=2, software=GIMP 2.10.6, datetime=2019:05:07 14:37:21], progressive, precision 8, 1200x800, components 3

We spot the 2 comments: CTFlearn{CTFIsEasy!!!} and Q1RGbGVhcm57U2tpQmFuZmZ9Cg==.

Since the first flag is was rejected, the second comment looks like a base64 encoded string (from the “=” characters that is used as padding)

Decoding the string gave the following:

$ base64 -d <<< Q1RGbGVhcm57U2tpQmFuZmZ9Cg==
CTFlearn{SkiBanff}

With CTFlearn{SkiBanff} being the real flag of the challenge.