Enumerate databases
Gather information using database enumeration tools:
Find a page url with a GET request parameter
Test different SQL injection methods against the request parameter
List information about the existing databases
List information about tables present in a particular database
List information about the columns of a particular table
Dump the data