skills.rest
RideMatch1
RideMatch1COMMUNITY
Explore all skills by this author →
GitHub

offensive-sqli

Identify and test SQL injection vectors across inputs for vulnerability mapping.

Updated Aug 23, 2026
Search Tags:#web-security#sql-injection#penetration-testing#security-testing#vulnerability-discovery#offensive-sqli
One-click install
npx skills add https://github.com/RideMatch1/a.e.g.i.s --skill offensive-sqli
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: offensive-sqli
Source: https://github.com/RideMatch1/a.e.g.i.s/tree/main/packages/skills/skills/offensive/snailsploit-fork/sqli
Command: npx skills add https://github.com/RideMatch1/a.e.g.i.s --skill offensive-sqli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps offensive security testers quickly identify and exploit SQL injection vectors across web applications to assess data exposure and risk.

Core Features & Use Cases

  • Detection of classic and modern SQLi vectors including error-based, boolean-based, time-based, JSON-based, NoSQL, GraphQL, and WAF-bypass techniques.
  • Automation-friendly workflow with guidance for using tools like sqlmap, ghauri, and related payload strategies; suitable for API endpoints, ORM interactions, and multi-DB environments.
  • Real-world use cases covering web apps, APIs, and cloud-native stacks to enumerate databases, extract data, and verify impact with auditable results.

Quick Start

Run targeted SQLi tests against the target application to identify exploitable inputs and log vulnerabilities.

Frequently Asked Questions about offensive-sqli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for SQL injection across different database engines like MySQL, PostgreSQL, and MSSQL?▼

To test SQL injection across MySQL, PostgreSQL, MSSQL, and Oracle, this Skill applies detection techniques for error-based, boolean-based, and time-based vectors to map vulnerabilities and data exposure safely. It ensures reproducible results across multi-DB environments.

Can I use SQL injection testing for modern APIs and cloud-native stacks?▼

Yes, SQL injection testing works for modern APIs and cloud-native stacks by targeting JSON, NoSQL, GraphQL, and ORM-related inputs. This Skill identifies exploitable vectors across these endpoints to enumerate databases and verify impact with auditable results.

What is the best way to detect WAF-bypass and time-based SQL injection vulnerabilities?▼

The best way to detect WAF-bypass and time-based SQL injection is by applying targeted payload strategies across application inputs. This Skill guides automation-friendly workflows for tools like sqlmap and ghauri to identify and safely verify exploitable vectors.

Does this SQL injection testing workflow support tools like sqlmap and ghauri?▼

Yes, this SQL injection testing workflow supports tools like sqlmap and ghauri through automation-friendly guidance. It helps configure payload strategies to test inputs, extract data, and verify vulnerabilities with an auditable trail for remediation reporting.

How do I safely verify SQL injection vulnerabilities and generate remediation reports?▼

To safely verify SQL injection vulnerabilities, this Skill maps data exposure and ensures reproducible results during testing. It then generates remediation reporting with an auditable trail, documenting the verified impact across web apps and API endpoints.

What types of SQL injection vectors can I identify for penetration testing?▼

For penetration testing, you can identify error-based, boolean-based, time-based, JSON-based, NoSQL, and GraphQL SQL injection vectors. This Skill tests these vectors across inputs to assess data exposure risk and map vulnerabilities in target applications.

Related Skills

Explore More Software Engineering Skills→
ArianHobson333ArianHobson333
7

hunt-sqli

Detect and exploit SQL injection vulnerabilities in web applications.

Community
Advanced
jaskaranhundaljaskaranhundal
3

vulnerability-management

Score CVSS v3.1 and EPSS vulnerabilities and track SLA-based remediation.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

Burp Suite Web Application Testing

Intercept and modify HTTP traffic to test web application security.

Community
Advanced
pdparchitectpdparchitect
13

hunt-sqli

Detect SQL and NoSQL injection vulnerabilities using error-based, boolean-based, and time-based blind techniques.

Community
Advanced