Try exploiting the sqli to dump the users table.

(sqlmap may be useful)

Box: luhack-web-0

Port: 8085

Url: http://100.110.89.151:8085