Rbash, in its most restricted form, is nothing but a calculator. To get started, try this command: echo $(( 1337 + 1337 )) The flag does not have an easy guessable filename, but it is located in the initial working directory of the rbash instance.

Connect via socat ...