skills.rest
dungsnowaxe
dungsnowaxeCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

sql-injection-testing

Detect and validate SQL injection vulnerabilities across database types.

1|Updated Mar 4, 2026
Search Tags:#sql injection#penetration testing#database security#vulnerability scanning#dast#cwe-89
One-click install
npx skills add https://github.com/dungsnowaxe/prometheus-red-team-bot --skill sql-injection-testing-dungsnowaxe
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sql-injection-testing
Source: https://github.com/dungsnowaxe/prometheus-red-team-bot/tree/main/promptheus/skills/dast/sql-injection-testing
Command: npx skills add https://github.com/dungsnowaxe/prometheus-red-team-bot --skill sql-injection-testing-dungsnowaxe

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the detection and validation of SQL injection vulnerabilities, a critical class of security flaws that can lead to data breaches and system compromise.

Core Features & Use Cases

  • Comprehensive SQLi Testing: Covers time-based, error-based, boolean-based, UNION-based, stacked query, and out-of-band SQL injection patterns.
  • Database Support: Tailors payloads for MySQL, PostgreSQL, MSSQL, Oracle, and SQLite.
  • Use Case: When auditing a web application, use this Skill to systematically test all user-controlled inputs for SQL injection vulnerabilities, providing detailed evidence for each finding.

Quick Start

Use the sql-injection-testing skill to scan the endpoint '/api/users?id=1' for SQL injection vulnerabilities.

Frequently Asked Questions about sql-injection-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SQL injection detection for web application endpoints?▼

Yes, this Skill tailors SQL injection payloads specifically for MySQL, PostgreSQL, MSSQL, Oracle, and SQLite databases. It adjusts its detection techniques based on the target database type to accurately identify vulnerabilities across different environments.

What SQL injection techniques are covered by automated vulnerability scanning?▼

To test for SQL injection, target a specific endpoint like '/api/users?id=1' and run the Skill to scan all user-controlled inputs. It automatically injects payloads, monitors application responses, and generates a detailed report validating any discovered vulnerabilities.

How does a scanner validate time-based and error-based SQL injection flaws?▼

This Skill requires no external dependencies to perform SQL injection testing. It operates autonomously using internal scripts and reference payloads to audit web applications without needing additional penetration testing tools or complex environment setups.

What is the best way to test for CWE-89 vulnerabilities in a web API?▼

Yes, this Skill can detect out-of-band SQL injection by injecting specific payloads and monitoring for out-of-band interactions. This technique is particularly useful for identifying blind SQL injection vulnerabilities where the application does not return direct error messages or visible content changes.

Related Skills

Explore More Software Engineering Skills→
cybersecwomancybersecwoman
5

hunt-sqli

Detect SQL injection vulnerabilities in web applications using sqlmap.

Community
Advanced
baphledbaphled
1

security

Evaluates code for vulnerabilities like SQL injection and XSS.

Community
Intermediate
dapperdiversdapperdivers
1

vuln-scan

Scan web applications for vulnerabilities using nuclei and nikto.

Community
Advanced
mahmutkamahmutka
13

Secure Code Review

Trace untrusted input to dangerous sinks across Python, JavaScript, Go, and Java.

Community
Advanced