For the SQL injection, at the top of the challenge. We should specify that they should rescan the website using the SGL and blind SQL audit tools. It just kind of starts straight up, so some people will likely be lost.
Or we could just say, "find and audit plugin for SQL and scan the website again"
Finally, at the top of the website, we should place: "Go this website. They say they are are super secure, but have a look around! This is the site you are attacking, so get familiar"
For the SQL injection, at the top of the challenge. We should specify that they should rescan the website using the SGL and blind SQL audit tools. It just kind of starts straight up, so some people will likely be lost.
Or we could just say, "find and audit plugin for SQL and scan the website again"
Finally, at the top of the website, we should place: "Go this website. They say they are are super secure, but have a look around! This is the site you are attacking, so get familiar"