I recently came across this blog post and tool on the The HP Security Laboratory Blogs. The tool is called Scrawlr and I have to say that it is a pretty nifty little tool. I've been playing with it this morning and have been pretty impressed, I will keep it handy to do some testing in the future! Check out the Blog post and tool over at: http://www.communities.hp.com/securitysoftware/blogs/spilabs/archive/2008/06/23/finding-sql-injection-with-scrawlr.aspx. With all the SQL Injection press lately, it's worth checking out!