[blackcobra]

There are several techniques, please read some SQL injection tutorial to actually understand what you are looking for.

I read, but the tutorial only show where u have ID not html or other extension file such chn...

Oh... euhmmm... read a bit about parameters and how they are sent to server. POST and GET methods and general stuff around.
A little introduction: http://www.w3schools.com/tags/ref_httpmethods.asp

if you have a URL of:

Code:

index.php?test=something

the ".php" is extension and "test=something" is parameter.

Which tool I can find the parameter? Burp....?