injection

Name: injection
Availability: InStock
Author: zhanglimao

Detect and exploit SQL, NoSQL, OS command, XSS, SSRF, XXE, and template injection vulnerabilities.

23|2|Updated Mar 13, 2026

Search Tags:#sql injection #xss #penetration testing #command injection #vulnerability detection #ssrf

Ready to run

npx skills add https://github.com/zhanglimao/Abyss --skill injection-zhanglimao

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: injection
Source: https://github.com/zhanglimao/Abyss/tree/main/skills/injection
Command: npx skills add https://github.com/zhanglimao/Abyss --skill injection-zhanglimao

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and exploit injection vulnerabilities, such as SQL, NoSQL, OS command, XSS, and template injections, which are critical security risks.

Core Features & Use Cases

Comprehensive Detection: Covers a wide range of injection types mapped to specific scenarios.
Methodology-Driven: Provides clear guidance on which technique to use based on observed conditions.
Use Case: When encountering an input field that returns database errors, this Skill guides you to use SQL injection detection and exploitation techniques found in ref/sql-injection-detection-exploitation.md.

Quick Start

Use the injection skill to detect SQL injection vulnerabilities when an input point returns database errors.

Frequently Asked Questions about injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect and exploit SQL injection vulnerabilities when an input field returns database errors?▼

To detect SQL injection, this Skill provides detailed methodologies and exploitation techniques based on observed conditions. It references specific guidance for identifying and exploiting injection points when database errors are returned.

What is the best way to bypass filters during XSS or command injection penetration testing?▼

For filter bypass during XSS or command injection, this Skill provides specific bypass techniques for different scenarios and system environments. It maps observed conditions to appropriate methodologies to successfully exploit vulnerabilities.

Can I use this Skill to detect both SSRF and XXE injection vulnerabilities?▼

Yes, this Skill detects and exploits various injection vulnerabilities including SSRF and XXE. It offers comprehensive coverage mapped to specific scenarios and provides clear guidance on which technique to use based on observed conditions.

How do I identify NoSQL and template injection vulnerabilities in different system environments?▼

Identifying NoSQL and template injections is supported through methodology-driven detection. The Skill provides clear guidance on which technique to use based on observed conditions in different system environments.

Does this injection detection approach provide specific methodologies for different attack vectors?▼

Yes, this injection detection approach provides specific methodologies for different attack vectors. It references detailed markdown files for each vector, covering detection, exploitation, and filter bypass techniques across various scenarios.