Does anyone know of safe, legal practice sites that that contain “index.php?id=1” ? that I could use to determine if they are vulnerable to sql injections? I know there are lists of sites vulnerable to sql injections online, but I do not want to get in trouble if for some reason I use them compromise them. Thanks!
Hrmm. Before you go practicing, I’d say don’t use SQLMap.
Its more for pentesters.
Maybe learn how to code your own tool for SQL injection before you start doing it. :)