SQL Injection Testing

概要

This skill empowers security researchers and developers to systematically detect and validate SQL injection vulnerabilities across multiple database systems including MySQL, MSSQL, PostgreSQL, and Oracle. It provides a structured workflow covering initial reconnaissance, exploitation techniques like UNION-based and time-based blind injection, and advanced filter bypass methods. By automating the generation of test payloads and providing remediation guidance, it helps ensure web applications are resilient against unauthorized database access and data exfiltration while adhering to strict legal and ethical guardrails.

主な機能

• 0 GitHub stars
• Multi-database support for MySQL, MSSQL, PostgreSQL, and Oracle fingerprinting.
• Sophisticated filter evasion strategies including encoding and whitespace manipulation.
• Advanced exploitation techniques for schema extraction and authentication bypass.
• Systematic detection using boolean-based, error-based, and time-based testing sequences.
• Automated generation of proof-of-concept payloads and remediation code examples.

ユースケース

• Validating the effectiveness of input sanitization and Web Application Firewall (WAF) configurations.
• Generating detailed security reports with evidence artifacts for vulnerability disclosure.
• Conducting authorized penetration testing on web application database layers.