This is your first real security module. We've been learning the basics until now, but here is where things get real. This module will require you to think FAR out of the box and apply what you have learned, in crazy sideways ways, to the problem to get the flag.
Remember, you are building a proof of insecurity. Your goal is the flag. Work backwards from there.
The challenges for the module are here: Web Security.
Good luck!