[arun hacker]

hi friends, I want to hack a particular site but i don't know where to start.
I know sqli but i can't see any id=something in that site. So, do you know any method by which i can find the injection point of any site
thanks

[Viktory]

Use Acunetix or WVS to scan the website for vulnerabilities.

[uberalles]

I agree with Viktory. Acunetix is a nice piece of software.

[Frosteh]

The best thing I find if you're looking manually is to spider the entire site and enumerate all the URLs and check to see if any accept parameters, and check all the posts to see if they accept parameters.

If you proxy a web request through Zed Attack Proxy (ZAP) then right click the site you select "attack" and then "spider site" and it will enumerate all the urls for you, any that have brackets on the end with a list of params are ones you can look at testing.