SQLMAP with DVWA and manual injection
I just published a write up or tutorial on sqlmap with DVWA (damn vulnerable web app). The write up I did was for fellow coworkers showing them how SQLMAP could easily automate sql injection however the value of understanding the manual injection commands. Check it out here http://null-reference.com/linux/sqlmap-with-dvwa-damn-vunerable-web-app/