sqli-testing

What problem does it solve?

This Skill unit automates the detection of SQL injection vulnerabilities in web applications, significantly reducing the time and effort required for security testing.

Core Features & Use Cases

• SQL Injection Detection: Identifies potential SQL injection vulnerabilities in web applications.
• Error Fingerprinting: Categorizes and identifies different SQL database engines based on error messages.
• Automated Checks: Performs automated checks for SQL injection vulnerabilities in URL parameters, POST bodies, cookies, and headers.
• Methodology Workflow: Implements a structured methodology for SQL injection detection including parameter inventory, baseline request, single-quote probe, balance check, boolean-based detection, error string detection, and time-based blind check.

Quick Start

Run the 'sqli-assessment' evaluation to test for SQL injection vulnerabilities in the target application.