Same concept as Entrypoint, but a different file.
We are told that it is running on a Python server,
so we can try to include common python web app filenames, such as app.py
and main.py
.
If we use the same method as Entrypoint and go to /static?f=main.py
, and we get the flag.