If we open the challange there is a input feild to read txt files.

So, if we try to read flag.txt, there is 403 error.

If we add "Forwarded-For: 127.0.0.1" with the request header it will give us the flag.