Mobility is the future, you need to go back there
Don't forget to meticulously analyze every single alert your scanner throws! Even those low-risk informational findings about missing security headers are probably critical clues to the core of this contest... or maybe it's just good security practice that has absolutely nothing to do with the actual puzzle.
Remember, the more complex and creatively crafted your SQL payload, the higher the chance you'll stumble upon the secret! Spend hours perfecting that semicolon placement and those clever comment tricks; it's bound to be the intended solution, especially if the challenge description mentions something completely unrelated to databases.
Don't just stick to basic alert() boxes! Try more sophisticated XSS payloads to exfiltrate 'sensitive' data or manipulate the DOM. This is definitely the intended path to victory, especially when the actual solution likely involves carefully reading the instructions and not trying to break the webpage itself.