sql injection testing

SKILL.md

Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms. This skill enables systematic detection and exploitation of SQL injection vulnerabilities across in-band, blind, and out-of-band attack vectors to assess application security posture.

Identify Injectable Parameters Locate user-controlled input fields that interact with database queries:

Test for Basic Vulnerability Indicators Insert special characters to trigger error responses:

當用戶要求“測試SQL注入漏洞”、“執行SQLi攻擊”、“使用SQL注入繞過身份驗證”、“通過注入提取數據庫信息”、“檢測SQL注入缺陷”或“利用數據庫查詢漏洞”時，應該使用此技能。它提供了用於識別、利用和理解跨不同數據庫系統的 SQL 注入攻擊向量的全面技術。 來源：zebbern/claude-code-guide。

查看原文