Add more words to module doc

documentation/modules/exploit/linux/http/sophos_utm_webadmin_sid_cmd_injection.md

@@ -2,9 +2,18 @@
 
 ### Setup
 
-Follow the [official instructions] from Sophos.
+Follow the [setup guide] from Sophos, in particular the [system requirements] and [installation instructions]. You can stop after that.
 
-[official instructions]: https://docs.sophos.com/nsg/sophos-utm/utm/9.707/help/en-us/Content/utm/utmAdminGuide/Installation.htm
+1. Boot the ISO
+1. Follow the on-screen prompts
+1. Reboot
+1. Hax
+
+Tested against [`asg-9.510-5.1.iso`](#scenarios) (unpatched) and `asg-9.511-2.1.iso` (patched).
+
+[setup guide]: https://docs.sophos.com/nsg/sophos-utm/utm/9.707/help/en-us/Content/utm/utmAdminGuide/Installation.htm
+[system requirements]: https://docs.sophos.com/nsg/sophos-utm/utm/9.707/help/en-us/Content/utm/utmAdminGuide/InstallationSystemRequirements.htm
+[installation instructions]: https://docs.sophos.com/nsg/sophos-utm/utm/9.707/help/en-us/Content/utm/utmAdminGuide/InstallationInstructions.htm
 
 ## Verification Steps