A method of finding websites vulnerable to SQL injection is using what we call "dorks".
Dorks :They are like search criteria in which a search engine returns results related to your dork. The process can be a little time consuming, but the outcome will be worth it after learning on how to use dorks.
Basic Formula of dork,
"inurl:."domain"/"dorks" "
So you would normally understand it like this:
"inurl"= input URL
"domain"= your desired domain ex. .gov
"dorks"= your dork of your choice
Do you really thinkinurl:is the only google dork that you can use? Wrong there are many you can use!
You can use following words instead of inurl :
intitle:
inurl:
intext:
define:
site:
phonebook:
maps:
book:
froogle:
info:
movie:
weather:
related:
link:
All these also help yo find other things then vulnerables.
Click here for more