Which database management systems are supported?

It supports a wide range of systems including MySQL, PostgreSQL, MSSQL, Oracle, SQLite, IBM DB2, and several others.

Can I test POST requests with this skill?

Yes, it provides workflows for using Burp Suite request files (-r flag) to test POST-based injection points.

Does this skill require specific permissions?

Yes, this skill is intended for use only on systems where you have explicit, written authorization to perform penetration testing.

How does it handle Web Application Firewalls (WAF)?

The skill includes guidance on using tamper scripts, random user-agents, and request delays to bypass detection systems.

SQLMap Database Pentesting

Name: SQLMap Database Pentesting
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Automates SQL injection detection and database exploitation using SQLMap's comprehensive security testing methodologies.

This skill provides systematic guidance for performing automated database penetration testing using SQLMap. It enables security professionals to identify SQL injection vulnerabilities, enumerate database structures, and extract sensitive data across various database management systems like MySQL, PostgreSQL, and Oracle. By offering structured workflows for everything from initial vulnerability verification to advanced OS shell access and WAF bypass techniques, it ensures thorough security audits and compliance testing within authorized environments.

主要功能

01Support for POST-based, bulk, and request-file targeting

02Sensitive data extraction and password hash dumping

03Automated SQL injection detection and verification

040 GitHub stars

05Comprehensive database, table, and column enumeration

06Advanced WAF/IPS bypass using tamper scripts

使用场景

01Verifying the effectiveness of database-level security controls and input validation

02Automating the discovery of vulnerable parameters across multiple target URLs

03Conducting authorized web application security audits and penetration tests

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front sqlmap-database-pentesting

For use in Claude.ai and ChatGPT

Download Skill

主要功能

01Support for POST-based, bulk, and request-file targeting

02Sensitive data extraction and password hash dumping

03Automated SQL injection detection and verification

040 GitHub stars

05Comprehensive database, table, and column enumeration

06Advanced WAF/IPS bypass using tamper scripts

使用场景

01Verifying the effectiveness of database-level security controls and input validation

02Automating the discovery of vulnerable parameters across multiple target URLs

03Conducting authorized web application security audits and penetration tests

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front sqlmap-database-pentesting

For use in Claude.ai and ChatGPT

Download Skill