Detect and exploit SQL, NoSQL, OS command, XSS, SSRF, XXE, and template injection vulnerabilities.
npx skills add https://github.com/zhanglimao/Abyss --skill injection-zhanglimao
Please help me install this Agent Skill. Skill: injection Source: https://github.com/zhanglimao/Abyss/tree/main/skills/injection Command: npx skills add https://github.com/zhanglimao/Abyss --skill injection-zhanglimao
This Skill helps identify and exploit injection vulnerabilities, such as SQL, NoSQL, OS command, XSS, and template injections, which are critical security risks.
ref/sql-injection-detection-exploitation.md.Use the injection skill to detect SQL injection vulnerabilities when an input point returns database errors.
High-intent search queries and answers about installing and using this skill.
To detect SQL injection, this Skill provides detailed methodologies and exploitation techniques based on observed conditions. It references specific guidance for identifying and exploiting injection points when database errors are returned.
For filter bypass during XSS or command injection, this Skill provides specific bypass techniques for different scenarios and system environments. It maps observed conditions to appropriate methodologies to successfully exploit vulnerabilities.
Yes, this Skill detects and exploits various injection vulnerabilities including SSRF and XXE. It offers comprehensive coverage mapped to specific scenarios and provides clear guidance on which technique to use based on observed conditions.
Identifying NoSQL and template injections is supported through methodology-driven detection. The Skill provides clear guidance on which technique to use based on observed conditions in different system environments.
Yes, this injection detection approach provides specific methodologies for different attack vectors. It references detailed markdown files for each vector, covering detection, exploitation, and filter bypass techniques across various scenarios.
bpnrockstarDetect and demonstrate CSRF vulnerabilities in web applications via HTTP analysis.
BoraPerusicDetect, exploit, and validate SQL injection vulnerabilities in web applications.
giosuetedeschi-specIntercept and modify HTTP traffic to test web application security.
Q16GOrchestrate injection vulnerability tests across web application inputs and sinks.