Using Google to search for a SQL injection Vulnerable website. In Pen Test process, you need to find your own website / client website in google and try to check whether the website appear in page 1 or 2 and easily exposes to the hacker, because if it is, the hacker can test whether your website can be hacked or not.