web-exploitation

Automate SQL injection detection and exploitation by running sqlmap against target URLs to identify vulnerabilities and extract database contents. This Skill configures sqlmap with batch mode and output directories to streamline the web application security assessment process.

Testing for Server-Side Request Forgery (SSRF) and Server-Side Template Injection (SSTI) involves identifying input vectors that manipulate server-side logic. This Skill provides a knowledge base and scripts to detect and exploit these web application vulnerabilities during penetration testing.

Yes, ysoserial and PHPGGC are integrated to automate the generation and exploitation of insecure deserialization chains. These tools facilitate command injection and vulnerability assessment by delivering payloads that execute arbitrary commands on the target web application.

Yes, this skill supports detecting IDOR and command injection flaws by automating vulnerability assessment workflows. It leverages scripts and reference materials to identify insecure direct object references and execute command injection attacks during penetration testing.

To run sqlmap for vulnerability assessment, you need a target URL with injectable parameters and the execution environment configured with its dependencies. The Skill uses sqlmap, ysoserial, and PHPGGC to automate the detection and exploitation of web application vulnerabilities.