Orchestrate injection vulnerability tests across web application inputs and sinks.
npx skills add https://github.com/Q16G/aster --skill injection-testing-q16g
Please help me install this Agent Skill. Skill: injection-testing Source: https://github.com/Q16G/aster/tree/main/skills/pentest/injection-testing Command: npx skills add https://github.com/Q16G/aster --skill injection-testing-q16g
Injection vulnerabilities arise when user input flows unvalidated into executable contexts, enabling attackers to leak data, deface applications, or take over systems. This Skill provides a structured checklist and orchestration to systematically test multiple sink types across inputs and endpoints.
Run the injection-testing Skill against a target URL or input source to begin the assessment.
High-intent search queries and answers about installing and using this skill.
Systematic injection testing identifies and verifies vulnerabilities across sinks like SQL, XSS, command injection, SSRF, XXE, and SSTI by orchestrating targeted scans against forms, query parameters, and API payloads to generate structured findings reports.
Yes, you can test multiple injection sink types in a single scan. The tool orchestrates relevant sub-skills for each sink type, including SQL injection, XSS, command injection, SSRF, XXE, and SSTI, to verify vulnerabilities end-to-end across application inputs.
Yes, you need bash, rg, and related utilities installed in your environment to perform injection vulnerability scans. These dependencies are required to execute the systematic tests across web applications, APIs, and microservices and output actionable mitigation reports.
The best way to generate a remediation plan is to run an orchestrated injection test that collects evidence across sinks like SSRF and XXE. The tool outputs a structured findings report with actionable mitigations tailored to the discovered vulnerabilities.
Yes, this injection testing approach works for microservices and API payloads. It systematically tests application inputs across web forms, query parameters, and API payloads to identify executable context vulnerabilities like SQL injection, XSS, and SSTI.
dexhunterScan installed skills and sanitize external input against injection attacks.
jshsakuraIdentify and prioritize security risks across code, authentication, secrets, and infrastructure.
amano--Intercept HTTP traffic and test web applications for security vulnerabilities.
gmcabritaTrace untrusted input to data-exfiltration sinks and classify findings.
