CryptoHack/RSA Starter 1·10ptsRSA Starter 1 — CryptoHackCompute 101^17 mod 22663 — the foundational primitive that powers every later RSA challenge.Cryptoeasy#crypto#rsa#modular-exponentiationMay 16, 2026
picoCTF 2024/Weirder RSA·200ptsWeirder RSA — solving with lattice reductionSmall private exponent: Wiener attack via continued fractions recovers d directly.CryptomediumMedium#crypto#rsa#wienerMay 16, 2026
Hack The Box/Weak RSA·20ptsHTB Weak RSA — factoring small N with FactorDBPublic modulus is in FactorDB. Recover p,q,d in seconds and decrypt the ciphertext.Cryptoeasy#crypto#rsa#factordbMay 16, 2026
PlaidCTF 2025/Tales from the Crypt·500ptsTales from the Crypt — PlaidCTF 2025TLS renegotiation leaks partial RSA private key material — recover d via Coppersmith.CryptoinsaneBlog#crypto#rsa#plaidctf-2025Apr 6, 2025
picoCTF 2025/EVEN RSA CAN BE BROKEN???·200ptsEVEN RSA CAN BE BROKEN??? — picoCTF 2025RSA with an even public exponent — factor N and decrypt.CryptomediumBlog#crypto#rsa#picoctf-2025Mar 17, 2025