[JockerFace]

The SQLMap tool can be found in every penetration tester’s toolbox. It is one of the most popular and powerful tools when it comes to exploiting SQL injection vulnerability, which itself tops the OWASP list of Top 10 vulnerabilities. From confirming the SQL injection vulnerability to extracting the database name, tables, columns and gaining a full system, it can be used for multiple purposes.
Lets Start
1.Get Sqlmap on VitrualBox or Kali Linux
2.Download python 3 to make it works
After you have start SqlMap
3. Use this command

Code:

sqlmap -u http://site-to-test.com/admin/index.php –data=”user=admin&password=admin” -p user –data = POST data

for deeper search use -level=3 and -risk=3

you can also have access on Tables if the site has vulnerability