skills.rest
din4e
din4eCOMMUNITY
Explore all skills by this author →
GitHub

offensive-sqli

Identify and exploit SQL injection vulnerabilities across MySQL, MSSQL, PostgreSQL, and Oracle.

2|Updated Apr 21, 2026
Search Tags:#sql-injection#sqli#waf-bypass#offensive-security#web-pentesting#orm-cve-tracking#db-exploitation
One-click install
npx skills add https://github.com/din4e/Skills4RedTeam --skill offensive-sqli-din4e
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: offensive-sqli
Source: https://github.com/din4e/Skills4RedTeam/tree/main/skills/offensive-sqli
Command: npx skills add https://github.com/din4e/Skills4RedTeam --skill offensive-sqli-din4e

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides structured guidance to identify, exploit, and document SQL injection vulnerabilities in web applications to improve security testing outcomes.

Core Features & Use Cases

  • Supports error-based, boolean/time-based blind, UNION-based, out-of-band, NoSQL, GraphQL SQLi techniques and detection patterns.
  • Includes WAF bypass concepts and database-specific exploitation paths across MySQL, MSSQL, PostgreSQL, Oracle, plus ORM CVE tracking and automation workflows.
  • Practical use cases include web app pentests, bug bounty scopes, API security reviews, and cloud-native deployments.

Quick Start

Begin the assessment by mapping input vectors that reach the database and proceeding to probe for injectable parameters.

Frequently Asked Questions about offensive-sqli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and exploit SQL injection vulnerabilities across different databases?▼

SQL injection vulnerabilities are identified by mapping input vectors to the database and probing injectable parameters. Exploitation uses error-based, blind, UNION, and out-of-band techniques tailored to MySQL, MSSQL, PostgreSQL, and Oracle.

What is the best way to bypass WAF during web application pentesting?▼

WAF bypass during web pentesting involves applying database-specific exploitation paths and alternative injection techniques. Methods include using NoSQL, GraphQL, or WebSocket SQLi to evade pattern matching and reach backend databases.

Does this SQLi testing approach support NoSQL and GraphQL injection vectors?▼

Yes, SQLi testing supports NoSQL and GraphQL injection vectors alongside traditional error-based and blind techniques. It maps these input vectors to identify database exploitation paths in modern web applications and APIs.

How do I track ORM CVEs during a bug bounty security review?▼

ORM CVE tracking during security reviews involves mapping object-relational mapping vulnerabilities to database exploitation paths. It identifies cloud-native injection risks and integrates them into automated detection workflows.

Can I test WebSocket and API endpoints for SQL injection?▼

Yes, WebSocket and API endpoints can be tested for SQL injection by mapping their input vectors. The workflow probes these communication channels for injectable parameters and applies database-specific exploitation techniques.

Related Skills

Explore More Software Engineering Skills→
xalgordxalgord
846

api-discovery

Probe HTTP paths to discover API endpoints and versioning details.

Community
Intermediate
zapabobzapabob
2

sec-audit

Scan dependencies and custom code for security vulnerabilities.

Community
Advanced
giosuetedeschi-specgiosuetedeschi-spec

Burp Suite Web Application Testing

Intercept and modify HTTP traffic to test web application security.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

sql-injection-error

Extract database schemas and sensitive data via error-based SQL injection payloads.

Official
Intermediate