sqlmap

To detect SQL injection vulnerabilities in explicitly authorized parameters, you can use this Skill to assess targets during scoped penetration tests. It identifies injection behavior, determines the backend DBMS, and reports tested parameters with evidence and output files.

Replaying captured HTTP requests for penetration testing preserves request context like cookies, headers, and authentication. This Skill processes captured HTTP files to reproduce tests while maintaining the necessary session context for accurate vulnerability assessment.

DBMS fingerprinting and limited extraction during a vulnerability assessment require an explicitly authorized target and the installed sqlmap CLI. This Skill uses the CLI's help output to construct accurate commands, fingerprint the backend DBMS, and report findings.

Yes, this SQL injection testing approach requires the installed sqlmap CLI. The Skill relies on the local CLI and its current help output to construct accurate commands, preserve request context, and report findings with relevant result paths.

The best way to keep SQL injection checks within scope is to apply them only to explicitly authorized web application targets. This Skill enforces scoped penetration tests and limited extraction checks, requiring documented authorization before testing.

You should not use automated SQL injection detection without explicit authorization for the target web application. This Skill is strictly for scoped penetration tests and vulnerability assessments, requiring documented approval before testing any parameters.