[lostquotez_]

i would like to know whats the best way to find vulnerable websites for sql injection
for defacement

[~[DogiD]~]

Google dork, this is from 2011 but it still works https://hackforums.net/showthread.php?tid=1399276

Finding SQL Injection in modern sites is tricky.
Most of them are already patched OR they are using REST API or GraphQL or other methods to ask data from Database instead of querying.

~ DogiD

[player92]

find manually the vulnerability via google, thats the only best way

[cracker.toni]

apbank.ch/index.php?id=18
vulnerable?
can some one help me with this?

[нα¢кєя]

apbank.ch/index.php?id=18
vulnerable?
can some one help me with this?

This is ILLEGAL. Do not deface/attempt to hack for blackhat reasons.

[dexter0]

For a massive finding of SQL Injections, just use dorks, but not only with inurl:"id?=....". Try to look for errors generated by different databases.

If you want to find SQL Injection on a specific website, that is a different topic and you have a lot of options.