Tool to run SQL injection attacks on forms ( databases )

Most stuff can be found out using sqlmap —help

Example:

sqlmap -u 10.10.178.111 —forms —dump -C flag -T accounts

This particular example tries exploits against that DB first and if found an exploit, will inject that SQL statment and gain access to DB and can dump ( show ) the value of the data inside the flag column in accounts table ( C and T correlate to the respective flags).