skills.rest
JingyueCong
JingyueCongCOMMUNITY
Explore all skills by this author →
GitHub

sql-injection-testing

Identify and validate SQL injection vulnerabilities in web applications.

Updated Jun 17, 2026
Search Tags:#sql injection#vulnerability assessment#penetration testing#database security#web security#authentication testing
One-click install
npx skills add https://github.com/JingyueCong/LatentRiskBench --skill sql-injection-testing-jingyuecong
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sql-injection-testing
Source: https://github.com/JingyueCong/LatentRiskBench/tree/main/latentriskbench/agent/skills/sql-injection-testing
Command: npx skills add https://github.com/JingyueCong/LatentRiskBench --skill sql-injection-testing-jingyuecong

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security professionals identify SQL injection vulnerabilities in web applications and validate whether input handling, database queries, and authentication controls are exposed to attack.

Core Features & Use Cases

  • Vulnerability Assessment: Guides detection of injectable parameters across web requests, forms, cookies, and headers using controlled security testing methods.
  • SQLi Analysis Techniques: Covers in-band, blind, time-based, and out-of-band SQL injection assessment approaches along with database fingerprinting concepts.
  • Security Reporting: Supports documenting findings, proof-of-concept evidence, remediation guidance, and defensive improvements for authorized penetration tests.

Quick Start

Use the sql-injection-testing skill to assess the authorized web application URL for SQL injection vulnerabilities and generate a security assessment report.

Frequently Asked Questions about sql-injection-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify SQL injection vulnerabilities in web application parameters?▼

To identify SQL injection vulnerabilities, test injectable parameters across web requests, forms, cookies, and headers using controlled security testing methods to detect exposed database queries and authentication controls.

What are the different SQL injection testing techniques for database security?▼

SQL injection testing techniques include in-band, blind, time-based, and out-of-band assessment approaches, alongside database fingerprinting concepts to analyze how web applications handle malicious input.

Does penetration testing for SQL injection require knowledge of specific database types?▼

Yes, penetration testing for SQL injection requires knowledge of SQL databases, HTTP requests, testing tools, and secure assessment practices to effectively analyze database queries and authentication controls.

How do I validate blind SQL injection risks in authentication controls?▼

Validate blind SQL injection risks by applying structured security testing workflows to authentication controls, using time-based and out-of-band techniques to observe database response behaviors in authorized scenarios.

How should I document SQL injection findings for a vulnerability assessment report?▼

Document SQL injection findings by recording proof-of-concept evidence, detailed vulnerability reporting, and remediation guidance to support defensive improvements for authorized penetration tests.

Related Skills

Explore More Software Engineering Skills→
gongzeqgongzeq

katana-crawl-web

Crawls authorized web targets to generate deduplicated candidate URLs for vulnerability scanning.

Community
Intermediate
jinyimeng01jinyimeng01
54

report-agent

Generate HackerOne-format vulnerability reports from validated security findings.

Community
Advanced
alexfazioalexfazio
159

cc-trace

Intercept and inspect Claude Code API traffic using mitmproxy.

Community
Advanced
RIMTHAN-LABRIMTHAN-LAB
1

owasp-mobile-security-checker

Analyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.

Official
Intermediate