Kali Linux SQLMAP Question.

So SQLMAP works basically with sites that ends in php?id=5 for eg. But... my question is... how you hack a website that ends in.. php?page=download.. or something like that, a website that doesn't end in php?id=number.. or a website that ends in .com .fr, etc. Those are non-vulnerable sites, right? But i bet that they're still "hackable". Can someone give me some advices?