You have a shell on the target. The flag is buried somewhere in configs, logs, history files, and backups. Find it before the blue team wipes the box.