There's a buffer overflow while appending `.txt` to filename. Overwrite the `e` and try [Common Modulus Attack](https://crypto.stackexchange.com/questions/1614/rsa-cracking-the-same-message-is-sent-to-two-different-people-problem) to crack the plaintext of `flag.txt`.