[WEB] Freelancer

Found the injectable page, he login page, username and password hash but i don’t know what to do now, can anyone help me??
I read the code but nothing more than the first injectable page, and can’t find the tool’s “magic option” you all talking about .
Some hint or PM pls, i’m being crazy.
Thank you all.