sqlmap

Automatic SQL injection and database takeover tool.