Curling

figured out the input file (to read flag, not get shell), PM for hint