An Unown Relic

1. Steghide image with password dialga (the unown glyphs is base 64 encode of dialga)
2. Obtain first part of flag and the fragmented and jumbled cipher of hackemon-2026-sinnoh.vercel.app
3. Query the following endpoints in hackemon-2026-sinnoh.vercel.app

endpoint /spearpillar response { ciphertext:"gnldjbatn}l<z:Ph;{<kr" hint: "What pokemon has 4 legs when not distorted" }

endpoint /giratina { key-length:2 }

4. The hint "Use your brute force" before visiting this site hints towards XOR brute force with key length 2