skills.rest
sjinks
sjinksCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

triage-sqli-with-sqlmap-ddev

Run bounded sqlmap validation to confirm SQL injection reachability in a local DDEV WordPress environment.

Updated Mar 19, 2026
Search Tags:#ddev#wordpress#sqli#sqlmap#runtime-evidence#vulnerability-triage#local-test-bench
One-click install
npx skills add https://github.com/sjinks/ai-wp-vulnerability-triage --skill triage-sqli-with-sqlmap-ddev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: triage-sqli-with-sqlmap-ddev
Source: https://github.com/sjinks/ai-wp-vulnerability-triage/tree/main/.agents/skills/triage-sqli-with-sqlmap-ddev
Command: npx skills add https://github.com/sjinks/ai-wp-vulnerability-triage --skill triage-sqli-with-sqlmap-ddev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Triage SQL injection reachability in a local DDEV WordPress environment by providing optional, non-destructive runtime evidence using sqlmap after a code-backed reachability analysis.

Core Features & Use Cases

  • Non-destructive, bounded sqlmap runs in a local DDEV test bench to confirm suspected SQLi paths identified during code review.
  • Works with explicit inputs: entry URL/method/parameter set, required role, cookies/nonce context, expected SQL sink, and optional mitigation path.
  • Integrates with companion skills to establish reachability and validate mitigations, producing reproducible evidence for triage reports.

Quick Start

Run a bounded sqlmap validation against the confirmed path in the DDEV test bench using one of the starter command profiles.

Frequently Asked Questions about triage-sqli-with-sqlmap-ddev

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I confirm SQL injection reachability in WordPress without damaging the database?▼

Confirm SQL injection reachability by running bounded, non-destructive sqlmap validation against a local DDEV WordPress test bench to produce reproducible runtime evidence without harming data.

What do I need to run sqlmap against a suspected SQLi path in DDEV?▼

Running sqlmap for SQLi triage in DDEV requires a deterministic request shape including the entry URL, HTTP method, parameter set, minimum user role, and cookies or nonce context for authentication.

How does bounded sqlmap validation work for local SQLi testing?▼

Bounded sqlmap validation performs non-destructive checks across specific HTTP methods, parameters, and authentication contexts in a local DDEV environment to confirm suspected SQL injection paths.

Can I use sqlmap to triage SQLi vulnerabilities found during WordPress code review?▼

Yes, you can triage SQLi vulnerabilities found during code review by running starter sqlmap command profiles in a local DDEV WordPress test bench to confirm reachability with runtime evidence.

When should I not use sqlmap for SQL injection testing in a local environment?▼

You should not use sqlmap for SQL injection testing when reachability to the suspected path has not been established through prior code-backed analysis or when a deterministic request shape is unavailable.

What is the best way to generate reproducible SQLi triage reports for WordPress?▼

Generate reproducible SQLi triage reports by executing bounded sqlmap runs in a local DDEV WordPress test bench, integrating with companion skills to establish reachability and validate mitigations.

Related Skills

Explore More Software Engineering Skills→
balsm-healthbalsm-health
2

exploiting-sql-injection-vulnerabilities

Detect and exploit SQL injection vulnerabilities in web applications during penetration tests.

Official
Advanced
sjinkssjinks

vuln-triage-quality-gate

Validate WordPress vulnerability triage reports for evidence, scope, and CVSS consistency.

Community
Advanced
sjinkssjinks

triage-with-wpscan-vulnerability-testbench

Verify WPScan-reported vulnerabilities against a local DDEV test bench.

Community
Advanced
nibzardnibzard
2

pentest-toolkit

Automate web application and API security testing with vulnerability detection and reporting.

Community
Advanced