Does it support testing for blind SQL injection?

Yes, it includes comprehensive workflows for both boolean-based and time-based blind SQL injection extraction.

Which databases are supported by this skill?

The skill provides techniques and payloads specifically tailored for MySQL, MSSQL, PostgreSQL, and Oracle database systems.

Are there safety guardrails for these testing techniques?

Yes, the skill explicitly warns against destructive queries like DROP or TRUNCATE and emphasizes the need for written authorization before testing.

Can this skill help bypass Web Application Firewalls (WAF)?

It includes several filter bypass techniques, such as URL/Hex encoding, whitespace substitution, and keyword variation to evade detection.

SQL Injection Security Testing

Name: SQL Injection Security Testing
Author: zebbern

byzebbern

•

2,883

•

보안 및 테스팅

Performs comprehensive SQL injection vulnerability assessments to identify security flaws and validate input sanitization in web applications.

This skill empowers developers and security professionals to systematically detect and exploit SQL injection vulnerabilities across a variety of database systems, including MySQL, MSSQL, PostgreSQL, and Oracle. By providing specialized payloads for UNION-based, error-based, and blind injection techniques, it facilitates thorough security audits, authentication bypass testing, and remediation validation. It serves as an essential tool for assessing an application's security posture while adhering to legal and ethical testing standards through guided workflows and guardrails.

주요 기능

01Practical authentication bypass patterns for security validation

02Multi-database support for MySQL, MSSQL, PostgreSQL, and Oracle

03Automated information schema extraction and database fingerprinting

04Advanced filter bypass strategies using encoding and whitespace manipulation

05Comprehensive detection techniques for in-band, blind, and time-based SQLi

062,883 GitHub stars

사용 사례

01Security penetration testing and vulnerability assessments

02Validating web application input sanitization and WAF effectiveness

03Educational demonstrations of database exploitation and defense techniques

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add zebbern/claude-code-guide sql-injection-testing

For use in Claude.ai and ChatGPT

Download Skill