the ability to reset a lab
after mucking about with:
i ended up messing the pages with csrf reuests\blocking the comment form.
even though i can send manually a comment post request with a XSS script to fix this
on the victims session (in order to complete the lab), i think you need to have the ability to reset the lab in order to avoid such convoluted solutions that occur in case of a mess done.
The lab should reset after 15 minutes of inactivity.
Please let us know if you need any further assistance.