Probe web endpoints for SQL, NoSQL, OS command, SSTI, XXE, and LDAP injection vulnerabilities.
npx skills add https://github.com/hoanghn61/.agents --skill injection-hoanghn61
Please help me install this Agent Skill. Skill: injection Source: https://github.com/hoanghn61/.agents/tree/main/skills/injection Command: npx skills add https://github.com/hoanghn61/.agents --skill injection-hoanghn61
This Skill helps you identify and validate injection vulnerabilities so you can move from vague suspicions to clear, evidence-backed findings.
Use the injection skill to test an authenticated login endpoint by first identifying all input vectors (parameters, headers, cookies, and JSON fields), then running minimal probes to detect the injection type and confirm impact with controlled evidence.
High-intent search queries and answers about installing and using this skill.
To test for SQL injection and command injection vulnerabilities, you can use a structured probe-to-verify workflow that identifies input vectors like parameters and headers, applies targeted payloads, and captures evidence of exploitable behavior.
Identifying SSTI and XXE injection flaws requires probing template-like fields and XML bodies with reference-backed payloads to detect parser or interpreter manipulation and confirm the vulnerability with controlled evidence.
Yes, you can test NoSQL injection and LDAP/XPath filters across JSON bodies and cookies by exercising all input surfaces to detect how untrusted input reaches query builders and directory query logic.
A payload workflow validates injection impact by guiding a repeatable process to detect the injection type, escalate with targeted payloads from bundled reference material, and capture controlled evidence proving the vulnerability.
Injection testing does not require external dependencies to verify template and command execution flaws, as it uses bundled reference components to support targeted payload selection and interpretation of interpreter behavior.
ionclaw-orgExecutes arbitrary HTTP requests with configurable methods, headers, and bodies.
zebbernGenerate Synack Red Team vulnerability reports in SRT format with VRT classification and CVSS scoring.
jokken79Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.
AndyAnh174Detect and exploit stored, reflected, and DOM-based XSS vulnerabilities.
