hunt-sqli

Detect SQL injection vulnerabilities in web applications using sqlmap.

5|Updated May 27, 2026

Search Tags:#sql injection #security audit #security scanning #vulnerability detection #web application security

Ready to run

npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-sqli-cybersecwoman

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-sqli
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-sqli
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-sqli-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires sqlmap, burp Suite, wappalyzer, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill unit automates the detection and analysis of SQL injection vulnerabilities, streamlining the process for security researchers and developers.

Core Features & Use Cases

Automated SQLi Detection: Identifies SQL injection vulnerabilities in web applications.
Vulnerability Analysis: Provides in-depth analysis of SQL injection attack vectors and potential impacts.
Use Case: When performing a security audit of a web application, this Skill can quickly identify potential SQL injection vulnerabilities, saving time and resources.

Quick Start

Activate the skill with the command 'hunt-sqli target.com' to initiate a SQL injection scan on the specified target.

Frequently Asked Questions about hunt-sqli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect SQL injection vulnerabilities in a web application?▼

To detect SQL injection vulnerabilities, this Skill analyzes input parameters, response headers, and error messages to identify potential SQL injection flaws. It automates the scanning process for security researchers and developers to streamline security audits.

Do I need sqlmap to scan for SQL injection flaws?▼

Yes, you need sqlmap installed to scan for SQL injection flaws. The Skill requires sqlmap and various other security tools like Burp Suite and Wappalyzer for thorough vulnerability scanning and analysis.

What is the best way to automate a SQL injection security audit?▼

The best way to automate a SQL injection security audit is to activate the Skill with the command 'hunt-sqli target.com'. This initiates an automated scan that analyzes input parameters and error messages to identify vulnerabilities quickly.

How does response header and error message analysis find SQL injection?▼

Response header and error message analysis finds SQL injection by examining server responses for database-related errors and anomalies. The Skill analyzes these outputs alongside input parameters to detect SQL injection attack vectors and potential impacts.

Can I use Burp Suite and Wappalyzer for web application security scanning?▼

Yes, you can use Burp Suite and Wappalyzer for web application security scanning. They are integrated dependencies that work with sqlmap to provide thorough vulnerability detection and analysis of web applications.