skills.rest
dapperdivers
dapperdiversCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

post-parameter-tester

Test POST parameters for SQL injection, XSS, and command injection vulnerabilities.

1|1|Updated Feb 8, 2026
Search Tags:#sql injection#xss#penetration testing#web security#api testing#command injection#vulnerability scanning
One-click install
npx skills add https://github.com/dapperdivers/roundtable-arsenal --skill post-parameter-tester
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: post-parameter-tester
Source: https://github.com/dapperdivers/roundtable-arsenal/tree/main/pentest/post-parameter-tester
Command: npx skills add https://github.com/dapperdivers/roundtable-arsenal --skill post-parameter-tester

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security professionals identify common POST parameter vulnerabilities by automating tests for injection flaws that are difficult to find through manual inspection.

Core Features & Use Cases

  • Injection Testing: Tests web forms and API endpoints for SQL injection, reflected XSS, and command injection vulnerabilities using multiple detection techniques.
  • Evidence Collection: Captures vulnerability indicators, response analysis, confidence levels, and structured JSON findings for review.
  • Use Case: A penetration tester can analyze an authenticated API endpoint with JSON input, identify vulnerable parameters, and produce findings for remediation.

Quick Start

Use the post-parameter-tester skill to scan the provided POST endpoint for SQL injection, XSS, and command injection issues and return a vulnerability report.

Frequently Asked Questions about post-parameter-tester

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test POST parameters for SQL injection and XSS vulnerabilities?▼

Testing POST parameters for SQL injection and XSS involves sending automated payload tests to web forms and API endpoints, then analyzing server responses to identify injection flaws and generate structured security findings.

Can I scan authenticated JSON API endpoints for command injection vulnerabilities?▼

Scanning authenticated JSON API endpoints for command injection is supported by applying payload tests to authorized API workflows, analyzing response indicators, and producing structured JSON findings for remediation.

Do I need curl and jq to automate web injection vulnerability scanning?▼

Curl and jq are required dependencies to automate web injection vulnerability scanning, as they execute payload tests against POST parameters and parse response data to generate structured security findings.

What is the best way to automate penetration testing for web form injection flaws?▼

The best way to automate penetration testing for web form injection flaws is using curl-based automation to deliver payloads and jq to analyze responses, capturing confidence levels and vulnerability indicators in a structured report.

Does this injection testing approach work for reflected XSS detection in API authentication flows?▼

Injection testing for reflected XSS detection works within API authentication flows by applying multiple detection techniques to POST parameters, analyzing response reflections, and generating evidence collections for vulnerability assessment.

When should I not use automated POST parameter testing for vulnerability assessment?▼

Automated POST parameter testing should only be used in authorized penetration testing scenarios, and should not be deployed against targets without explicit authorization to execute payload tests and vulnerability scanning workflows.

Related Skills

Explore More Software Engineering Skills→
YukiIto1999YukiIto1999

exploiting-sql-injection-vulnerabilities

Detect and demonstrate SQL injection vulnerabilities in web applications during authorized assessments.

Community
Advanced
dapperdiversdapperdivers
1

report-generator

Generate structured markdown penetration test reports from JSON security scan findings.

Community
Intermediate
giosuetedeschi-specgiosuetedeschi-spec

Burp Suite Web Application Testing

Intercept and modify HTTP traffic to test web application security.

Community
Advanced
crazyMarkycrazyMarky
277

exploit-sqli

Detects and exploits SQL injection vulnerabilities in web applications using automated and manual techniques.

Community
Advanced