How to find A vulnerable Website

Go to google homepage and search for inurl:php?id=

You will get probably thousands of result.Now open any page and add a apostrophe(*)to the
end of the url.Example if the Url was it should be

If u get a SQL syntax error then this website can be vulnerable to SQL injection.
Now you should use havji on this URL.