https://6plosive.github.io/portfolio/en/Recent content on Gabriel YipHugoen-USTue, 10 Jun 2025 20:33:57 +1000https://6plosive.github.io/portfolio/en/posts/rcr-writeup/note-service/Tue, 10 Jun 2025 20:33:57 +1000https://6plosive.github.io/portfolio/en/posts/rcr-writeup/note-service/<h2 id="note-service">Note-Service</h2> <h3 id="-observation">🫣 Observation</h3> <p>We see a very simple flask website with file upload and download function. When you upload a file on the website, it will save the file and change the file name as the base64 of the content&rsquo;s first 50 bytes. This means if you upload a file named <code>abc.txt</code> with the content <code>abcdefg</code>, the file will be saved with the name <code>YWJjZGVmZw==</code> and the content will remain <code>abcdefg</code>.</p>https://6plosive.github.io/portfolio/en/posts/rcr-writeup/3-rsa/Tue, 10 Jun 2025 15:47:44 +1000https://6plosive.github.io/portfolio/en/posts/rcr-writeup/3-rsa/<h2 id="3-rsa">3-RSA</h2> <blockquote> <p>I did nothing much in this except asking AI (Gemini 2.5 Pro) about this. Surprisingly the prompt works the first time! Since the AI probably explains it better than me, here is the LLM response:</p></blockquote> <p>The vulnerability in this code lies in the predictable way the prime numbers for the RSA moduli were generated. The primes <code>a, b, c</code> and <code>x, y, z</code> are not random; they form <strong>arithmetic progressions</strong>. This mathematical relationship allows an attacker to link the three public keys (<code>n1</code>, <code>n2</code>, <code>n3</code>) together, ultimately revealing all the secret prime factors.</p>https://6plosive.github.io/portfolio/en/posts/my-first-post/Wed, 21 May 2025 13:38:16 +1000https://6plosive.github.io/portfolio/en/posts/my-first-post/<p>whats up yppp</p>