How to manually attempt SQL injections on my website?

Question

I found lots of tools which injects passwords, bucks and various stuff into others websites.

However, I'm sure that none will work against all forms on my site.

So, I want to manually test my site for SQL injections.

What's a good way to attempt SQL injections on my website?

Do I need the database name, user name and password of the database? Do I need to know the SQL port number? How do I get started?

Answer 1

Take a look at this cheat sheet to try it manually. OWASP also covers the theory. You should be familiar with it in order to use automated tools effectively.

Here is a list of tools you might use.