It would be really nice if the module went deeper into detail on actually discovering SQLi vulnerabilities. Going from the clear-output SQLi throughout the module into discovering the blind injection of the SA was a little frustrating without any extra guidance.