sqlmap is an open-source tool that is designed to detect SQL injection flaws in web applications.

Further reading