Shebangs ftw! We started by trying `#!/bin/ls`, which listed the file. Then, we tried `#!/bin/sh`, which (obviously) did nothing. Then we read the manpage on `sh`, and found out that `sh -s` reads commands from stdin. Therefore, the final answer was `#!/bin/sh -s`, which then spawns a shell. We just simply ran `cat flag`.