Tags: js 

Rating: 2.0

TLDR:

Use defineSetter in first request to set callback for Flag_SessionId assignment, In second request when flag function gets assigned, this callback gets executed.

Original writeup (https://github.com/TeamUnderdawgs/CTF-Docs/blob/master/TsgCTF2020/Web/Beginners-Web.md).