All web applications depend on the internet. Now a day’s web applications play an important role in everybody’s life. Thousands of transactions and confidential data are done through these applications, 80% out of which are vulnerable to malicious attacks according to the survey by the Open Web Application Security Projects. Website hacking exploits the web pages and database; thus, compromising the confidential and sensitive information in it. The highest security threat for web applications is SQL injections. Here we use two tools for finding the vulnerability in the websites and enables access to the database, viewing data in tables such as users, passwords, backups, phone numbers, credit cards, e-mail addresses, and other confidential and sensitive information. Grabber is a web application scanner which scans for the vulnerability. Sqlmap is a tool that provides penetration testing for the process of detecting and exploiting SQL injection flaws.