Identify and validate SQL injection vulnerabilities across web applications and APIs.
npx skills add https://github.com/n4igme/randscript --skill hunt-sqli-n4igme
Please help me install this Agent Skill. Skill: hunt-sqli Source: https://github.com/n4igme/randscript/tree/main/llm/skills/claude-hunter/skills/hunt-sqli Command: npx skills add https://github.com/n4igme/randscript --skill hunt-sqli-n4igme
Hunt-sqli helps security researchers identify and validate SQL injection vulnerabilities across web apps and APIs, enabling accurate risk assessment.
Test a target URL with representative SQLi payloads to verify injectable parameters and measure responses.
High-intent search queries and answers about installing and using this skill.
To test web applications for SQL injection vulnerabilities, apply targeted payloads across parameterized, boolean, time-based, and NoSQL formats to identify and validate injectable parameters and assess security risk.
Time-based and NoSQL injection payloads target API endpoints by measuring response delays and mapping response signals to confirm exploitability across diverse web interfaces and parameterized queries.
Document SQL injection findings using templates that capture reproducible validation steps, timing evidence, and safe remediation guidance to support incident response and remediation planning.
Yes, you can apply representative SQLi payloads across common search and filter endpoints to verify injectable parameters, measure responses, and determine overall exploitability and security risk.
The best way to validate boolean-based SQL injection during a pentest is to apply targeted payloads and analyze response signals to confirm exploitability and document the findings with clear evidence.
cmndcntrlcyberProvide security payloads and bypass techniques for web application penetration testing.
dreadnodeValidate penetration testing findings through a three-phase verification process.
stevengonsalvezChain 20+ security tools into a single web reconnaissance and vulnerability scanning pipeline.
sixscripts-aiIdentify and demonstrate SQL injection vulnerabilities across MySQL, MSSQL, PostgreSQL, and Oracle.
