so, from the name of lab tell us to back to basics , so i open dev tools and review network tarffic you can use burp but it doesn't need it , just click f-12 to see dev tools
like this , now click on network and reload page
you got this , now go to and check every request, and you found it ( i mean flag ) in second request
