[blackcobra]

Some websites uses that mod_rewrite or something like that, to change url.
For example I have seen the webpage

Code:

http://www.website.com/articles/science/spaceship_fuel.html

and after few tests turned out, that "spaceship_fuel" is GET parameter for sql. So to find sql injection vulnerability you need luck, experience and some brains. Basic web programming knowledge also helps.

Could u explain more clearly?