Where do I start?

Cracking is very easy, all you need is a little budget to get a combo.
But when you get to sqli injections, you gotta invest some time.