Detect SQL and NoSQL injection vulnerabilities across web applications and APIs.
npx skills add https://github.com/uphiago/recon-skills --skill hunt-sqli-uphiago
Please help me install this Agent Skill. Skill: hunt-sqli Source: https://github.com/uphiago/recon-skills/tree/main/redteam/hunt-sqli Command: npx skills add https://github.com/uphiago/recon-skills --skill hunt-sqli-uphiago
This Skill eliminates the risk of missing critical SQL injection (including NoSQL injection) vulnerabilities during security assessments, which are high-severity flaws that can lead to full data exfiltration, authentication bypass, and even remote code execution on target systems.
Use the hunt-sqli skill to audit all input parameters on your authorized target's search, filter, API, and authentication endpoints for SQL injection and NoSQL injection flaws, following the provided methodology to confirm and document findings for your penetration test or bug bounty report.
High-intent search queries and answers about installing and using this skill.
Yes, this methodology covers NoSQL injection patterns including MongoDB $regex and $where operators, alongside ORM raw-fragment bypasses for frameworks like Django, Sequelize, and Mongoose in Node.js applications. It provides payload patterns to detect and confirm these modern web security vulnerabilities.
The methodology applies to SaaS platforms, e-commerce systems, third-party plugins, Apache Airflow instances, and MongoDB-backed Node.js applications. It provides real-world impact context from verified bug bounty reports involving targets like Rocket.Chat and Mozilla to demonstrate business risk.
The best way to detect blind SQL injection in GraphQL resolvers is by applying time-based detection techniques using structured payload patterns. This approach confirms exploitable flaws by measuring response delays, helping validate high-severity vulnerabilities for bug bounty reports.
You escalate SQL injection findings by following a structured hunting workflow that confirms vulnerabilities through error-based, boolean-based, and time-based detection gates, then demonstrates full data exfiltration or authentication bypass. This validates exploitable flaws to meet bug bounty report quality standards.
giosuetedeschi-specIdentify and validate HTML injection vulnerabilities in web application inputs.
jinyimeng01Validate suspected web vulnerabilities and generate structured exploit reports.
jinyimeng01Select semantic fuzzing payloads for API parameters based on attack patterns.
Archive228Reviews SQL and ORM queries for injection risks, missing indexes, and bottlenecks.
