You can get the flag to this first part of the
problem by getting  the  website  to  run  the
get_flag1  command. I heard the admin likes to
launch it when he visits his own profile.