tl;dr

• use hash extension to bypass password check on login.
• use RSA properties to recover $q$ and get $p$ and therefore $N= p*q$.
• sign the message given, and get the flag.