Which tool is used to automate SQL injections and exploit a database by forcing a given web application to connect to another database controlled by a hacker?

DataThief automates the process of exploiting SQL injection flaws by leveraging out-of-band techniques that coerce a vulnerable web application's database server to initiate a connection back to a database under the attacker's control, enabling data extraction. This out-of-band approach is particularly useful when in-band SQL injection responses are blind or suppressed, making DataThief suited for the described scenario.

NetCat is a general-purpose networking utility for reading and writing raw TCP/UDP data; it does not automate SQL injection or database exploitation.

Cain and Abel is a password recovery and sniffing tool for Windows; it does not perform SQL injection attacks.

SQLInjector is not a widely recognized or standard tool associated with forcing a target application to connect to an attacker-controlled database in the way described.