Enter the flag:
Claim Command:
/challenge claim flag:<flag>
Try exploiting the sqli to dump the users table.
(sqlmap may be useful)
Box: luhack-web-0
Port: 8085