Bounty: $120 Description:
The yoda image is a red herring. It did made me waste some time of my life :). So remembering that the image from Level 1 was pretty much the same, I decided to download both images and look for different bits.
After confirming both images are identical, I knew the flag was not in the image, so it had to be somewhere else. Next I checked the source code from level 1 for differences.
We see two differences. The first one is the flag in the HTML comment field from Level 1. However Level 2 seems to have additional CSS, css/design.css. Let’s see what’s in there.
Yep, we got it. Since the hex encoded strings is actually an “id selector” in CSS, decoding it we get the flag.