skills.rest
cmndcntrlcyber
cmndcntrlcyberCOMMUNITY
Explore all skills by this author →
GitHub

hunt-sqli

Identify and exploit SQL injection vulnerabilities in web applications.

3|Updated Nov 12, 2025
Search Tags:#sql injection#vulnerability assessment#web security#bug bounty#red teaming
One-click install
npx skills add https://github.com/cmndcntrlcyber/rtpi --skill hunt-sqli-cmndcntrlcyber
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-sqli
Source: https://github.com/cmndcntrlcyber/rtpi/tree/main/knowledge_seed/bug_hunter_skills/hunt-sqli
Command: npx skills add https://github.com/cmndcntrlcyber/rtpi --skill hunt-sqli-cmndcntrlcyber

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill aids in the identification and exploitation of SQL injection vulnerabilities, helping red teamers and bug hunters uncover security flaws in web applications.

Core Features & Use Cases

  • SQL Injection Hunting: Detects and leverages SQL injection vulnerabilities in web applications.
  • Sources Analysis: Utilizes public bug bounty reports for insights into SQL injection patterns.
  • Use Case: When conducting security audits on web applications, this Skill helps automate the process of finding and confirming SQL injection vulnerabilities.

Quick Start

Analyze a target application using the hunt-sqli skill and document the findings.

Frequently Asked Questions about hunt-sqli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find SQL injection vulnerabilities in web applications?▼

To find SQL injection vulnerabilities, this Skill applies manual analysis techniques, error-based probing, and boolean-based blind attacks to uncover security flaws in web applications.

What is the best way to detect blind SQL injection during a security audit?▼

The best way to detect blind SQL injection is using boolean-based blind attacks, which analyze the target application's behavior to confirm vulnerabilities without direct error feedback.

Can I use bug bounty reports to improve my SQL injection hunting?▼

Yes, you can use bug bounty reports to improve SQL injection hunting, as this Skill utilizes public bug bounty reports to provide insights into common SQL injection patterns.

Does this SQL injection hunting process require manual intervention?▼

Yes, SQL injection hunting requires manual intervention and analysis of the target application's behavior to accurately identify and exploit vulnerabilities.

How does error-based probing work for vulnerability assessment?▼

Error-based probing works by injecting SQL payloads to trigger database errors, allowing you to analyze the application's response and confirm SQL injection vulnerabilities.

Related Skills

kaivyykaivyy
66

perseus:exploit

Generate and validate exploit scripts for web vulnerabilities with safety constraints.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

sql-injection-error

Extract database schemas and sensitive data via error-based SQL injection payloads.

Official
Intermediate
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced