[iii23]

Sqlmap can't be the only the way to steal dbs, so are their any other options?

[myorder]

Kind of new to this myself, however, have you ever tried "index of /" "/whatyourlookingfor/" for example: "index of /" "/user/orders/" search this with the ""  on google? I find alot of DB. but dont understand how to access the .php server side of file? i have Nord VPN but just learning it as well.

[Pikami]

Sqlmap can't be the only the way to steal dbs, so are their any other options?

Sql injection isn't the only way to get a sites database.
Here's a couple of things you can do:

• You can use dirbuster to find open directories that might host interesting stuff like db backups or configs.
  
• You can search for site's admins credentials in leaks from other sites.
  
• You can hack the server hosting the site and dump it from there
  

[Stratus]

Theres other tools you can use too, but like sqlmap is just the most popular. Ulitimately all the sql tools do the samish thing. If you're looking to avoid sqli, its gonna be a case by case thing for each site.

[deadlyfamous]

You can use dirbuster, pretty good u can find tuts on youtube