Scripts are nice, but they will fail eventually. But, that doesn’t mean the flaw is not exploitable. Eventually you will need to turn to manual techniques to verify a vulnerability. This is a very brief demonstration of how to manually verify a SQL injection flaw.