I wasn't happy with the default ASLR, so I fixed it. The flag is in a file called "flag" both in / and cwd.