sqli-poc

Detect and exploit SQL injection vulnerabilities in web applications with sqlmap.

5|3|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/zebbern/termstack --skill sqli-poc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sqli-poc
Source: https://github.com/zebbern/termstack/tree/main/.github/skills/sqli-poc
Command: npx skills add https://github.com/zebbern/termstack --skill sqli-poc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SQL injection testing is complex and time-consuming; sqli-poc provides a structured approach to detect and validate vulnerabilities across web apps through automated tools and manual techniques.

Core Features & Use Cases

  • Automated detection with sqlmap for rapid risk identification
  • Manual payload guidance for edge cases and advanced bypass scenarios
  • Detailed workflows for detection, enumeration, and data exfiltration-proof validation

Quick Start

Assess a target URL with sqlmap in non-interactive mode to detect SQL injection vulnerabilities and log the results.

Frequently Asked Questions about sqli-poc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect and verify SQL injection vulnerabilities in web applications?

To detect SQL injection vulnerabilities, you can use automated tools like sqlmap alongside manual payloads to test parameterized endpoints, error-based scenarios, and time-based injections, producing evidence with step-by-step procedures and remediation considerations.

Can I use sqlmap for authentication bypass and data enumeration during penetration testing?

Yes, sqlmap supports authentication bypass and data enumeration during penetration testing. It applies structured workflows to detect, exploit, and validate SQL injection risks rapidly in non-interactive mode, outputting detailed logs for verification.

What is the best way to test for error-based and boolean-based SQLi scenarios safely?

Testing error-based and boolean-based SQLi scenarios safely involves applying responsible testing guidelines using manual payloads and sqlmap. This structured approach validates vulnerabilities across web apps while generating evidence and remediation considerations without destructive exfiltration.

Does this SQL injection testing approach handle second-order and time-based SQLi scenarios?

Yes, this SQL injection testing approach handles second-order and time-based SQLi scenarios. It detects and exploits these vulnerabilities in web applications by combining automated sqlmap detection with manual payload guidance for advanced bypass cases.

Why should I use manual payloads for vulnerability testing when sqlmap provides automated detection?

Manual payloads complement automated sqlmap detection by targeting edge cases and advanced bypass scenarios that automated tools might miss. This ensures comprehensive vulnerability testing, validating complex SQL injection risks with detailed step-by-step evidence.

What do I need to safely perform SQL injection testing and validate data exfiltration risks?

To safely perform SQL injection testing, you need sqlmap and manual payloads following responsible testing guidelines. This setup detects vulnerabilities, executes data enumeration, and outputs validation evidence with remediation considerations to prove exfiltration risks.