Identify and exploit SQL injection vectors across multiple DBMS.
npx skills add https://github.com/Yliken/ai4 --skill sqli-sql-injection
Please help me install this Agent Skill. Skill: sqli-sql-injection Source: https://github.com/Yliken/ai4/tree/main/skills/sqli-sql-injection Command: npx skills add https://github.com/Yliken/ai4 --skill sqli-sql-injection
SQL injection remains a critical risk for data security, and this Skill provides a comprehensive playbook of techniques, payloads, and scenarios to identify, understand, and validate SQLi weaknesses across diverse database systems.
Provide a target URL and payload and run an initial boolean-based test such as ' OR 1=1-- to confirm an injection vector.
High-intent search queries and answers about installing and using this skill.
You can confirm a SQL injection vector by running an initial boolean-based test, such as providing a target URL with the payload ' OR 1=1--. This technique helps validate input handling flaws in data retrieval paths.
Yes, SQL injection techniques can be applied across multiple DBMS variants. The Skill provides DBMS-specific exploitation guidance, covering common RDBMS platforms as well as frameworks like ThinkPHP and Django GIS.
Out-of-band exfiltration is an advanced SQL injection technique used to retrieve data when direct response methods fail. It is included among the payload families to validate security controls and assess real-world risk.
For blind SQL injection vulnerabilities, you can apply boolean-blind and time-based techniques. These payload families allow data extraction without direct visual feedback by observing application behavior or response delays.
Yes, safe testing practices are required to avoid production impact when validating SQL injection vectors. This ensures that exploiting authentication, sorting, and reporting paths does not disrupt real-world services.
elementalsoulsMap XSS surfaces across web applications for safe testing and remediation.
cameronapakEnforce authentication and authorization checks on BKND API endpoints.
securityfortechDetect and exploit SQL injection vulnerabilities in web applications.
cosmixIdentify vulnerabilities, misconfigurations, and security best-practice violations across code, configurations, and infrastructure.
