This challenge has a `stack overflow` vulnerability. Basically, you can overwrite the return address with the address of your `shellcode`, by which you can send the content of flag over the socket.

Original writeup (https://github.com/sajjadium/ctf-writeups/tree/master/BSidesSF/2019/slowfire).