skills.rest
DorianGallo
DorianGalloCOMMUNITY
Explore all skills by this author →
GitHub

sqli-sql-injection

Detect SQL injection points and generate database-specific payloads for exploitation.

5|2|Updated May 16, 2026
Search Tags:#sql injection#waf bypass#second-order injection#database exploitation#oob exfiltration#blind inference#cve techniques
One-click install
npx skills add https://github.com/DorianGallo/hack-skills-local --skill sqli-sql-injection-doriangallo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sqli-sql-injection
Source: https://github.com/DorianGallo/hack-skills-local/tree/main/skills/sqli-sql-injection
Command: npx skills add https://github.com/DorianGallo/hack-skills-local --skill sqli-sql-injection-doriangallo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps you craft SQL injection payloads to exploit authentication logic, query parsing, and blind or out-of-band execution paths when user input reaches SQL.

Core Features & Use Cases

  • DBMS-aware exploitation workflows: Routes techniques by visible error clues and backend families (MySQL, MSSQL, Oracle, PostgreSQL, SQLite, DB2, Cassandra, BigQuery).
  • Advanced data exfiltration and inference: Uses boolean/time-based inference, plus critical OOB channels like DNS/HTTP exfiltration and in-band filesystem writes where applicable.
  • Real-world scenario adaptation: Applies second-order injection reasoning and framework/CVE-focused patterns, including ThinkPHP5 and Django GIS-style cases.

Quick Start

Use the sqli-sql-injection skill to analyze the suspected SQL sink in the request and generate DB-specific verification and exfiltration options for the target parameter.

Frequently Asked Questions about sqli-sql-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate database-specific SQL injection payloads for different DBMS backends?▼

To generate database-specific SQL injection payloads, this skill routes exploitation workflows by visible error clues and backend families like MySQL, MSSQL, Oracle, PostgreSQL, SQLite, DB2, Cassandra, and BigQuery.

What is the best way to perform out-of-band data exfiltration during blind SQL injection?▼

For blind SQL injection, out-of-band data exfiltration uses critical OOB channels like DNS/HTTP exfiltration and in-band filesystem writes where applicable, alongside boolean and time-based inference techniques.

How does second-order SQL injection work when user input does not directly reach the query?▼

Second-order SQL injection works by applying reasoning to workflows where malicious input is stored and later executed in a different query context, targeting non-parameter injection points and framework-specific cases.

Can I use WAF bypass patterns and CVE-inspired techniques for ThinkPHP5 SQL injection?▼

Yes, this skill supports WAF evasion patterns and applies framework or CVE-inspired exploit paths, including ThinkPHP5 and Django GIS-style cases, for authentication bypass and parameter manipulation.

How do I exploit SQL injection in INSERT, UPDATE, and DELETE statement variants?▼

Exploiting SQL injection in INSERT, UPDATE, and DELETE statement variants requires DBMS fingerprinting, SQL context handling, and correct OOB technique selection across non-parameter injection points.

Does this SQL injection skill handle ORDER BY and parameter manipulation for authentication bypass?▼

Yes, this SQL injection skill applies to authentication bypass, ORDER BY manipulation, and parameter manipulation by detecting injection points in application inputs and generating targeted payloads.

Related Skills

Explore More Education & Research Skills→
blacklanternsecurityblacklanternsecurity
253

sql-injection-blind

Exploit blind SQL injection using boolean, time-based, and out-of-band techniques.

Official
Advanced
ArianHobson333ArianHobson333
7

backend-inferencer

Analyze HTTP headers, cookies, DNS records, repository data, and HTML to infer backend technologies.

Community
Advanced
dreadnodedreadnode
11

h2-waf-bypass

Bypass WAF payload inspection using HTTP/2 binary framing attacks.

Official
Advanced
ok-helloworldok-helloworld
241

sqli-sql-injection

Identify SQL injection vulnerabilities and generate DB-specific exploitation evidence.

Community
Advanced