Use SQLmap to identify vulnerability parameters

• Fill the form in the browser GUI and submit it normally

• Go to the history tab in the burp suite and find the relevant request

• Right-click and select the option "copy to file"

• Save the file as anyname.txt

• SQLmap command to run

• python sqlmap.py r ~/Desktop/textsqli.txt proxy= http://127.0.0.1:8080

• Run SQL injection scanner on all requests