Rating:

jpeg画像が与えられる。

> if you need a password anywhere use this "urumdorn4"

というヒントがあるのでパスワードを使って抽出する系のステガノツールを試すと
steghideでファイルが抽出でき、フラグも書いてある。

```
$ steghide extract -sf dorna.jpg -p urumdorn4 -xf out
wrote extracted data to "out".

$ file *
dorna.jpg: JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 720x480, components 3
out: ASCII text

$ cat out
Hello, wish you success in our event

'dorna lar yovasi' is the nickname of a stadium in Urmia where volleyball lovers gather together.
This place has hosted important competitions such as the VNL and the Asian Championship.

flag : uctf{ZG9ybmFfbGFyX3lvdmFzaQ==} *base64-encoded

$ echo 'ZG9ybmFfbGFyX3lvdmFzaQ==' | base64 -d
dorna_lar_yovasi
```

Original writeup (https://blog.hamayanhamayan.com/entry/2023/09/04/232413).