Is it possible to bypass Web Application Firewalls (WAF)?

Yes, the skill covers the use of tamper scripts, random user-agents, and request delays to test the resilience of WAFs and IDS/IPS systems.

Which database systems are supported?

The skill provides guidance for a wide range of DBMS including MySQL, PostgreSQL, Microsoft SQL Server, Oracle, IBM DB2, and SQLite.

Can I use this skill for POST-based injections?

Yes, the skill includes specific workflows for loading HTTP request files (such as those from Burp Suite) to test POST parameters and headers.

Does this require special authorization?

Absolutely. This skill is intended for ethical security testing and requires explicit written permission from the owner of the target system before use.

What is SQLMap used for in this skill?

SQLMap is used to automate the process of detecting and exploiting SQL injection vulnerabilities, allowing security professionals to identify data leaks and unauthorized access points.

SQLMap Database Pentesting

Name: SQLMap Database Pentesting
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Automates the detection and exploitation of SQL injection vulnerabilities to identify and secure database-driven web applications.

This skill provides a systematic framework for using SQLMap to perform automated database penetration testing and security audits. It guides users through the entire workflow of SQL injection discovery, from initial vulnerability detection and database enumeration to advanced data extraction and OS shell access. It supports a wide range of database management systems including MySQL, PostgreSQL, and Oracle, offering specialized techniques for bypassing WAFs and handling complex injection points in both GET and POST requests.

主要功能

01Comprehensive database, table, and column enumeration

020 GitHub stars

03Sensitive data extraction and table dumping

04OS-level interaction and file system access capabilities

05Advanced WAF/IPS bypass using tamper scripts

06Automated SQL injection detection and exploitation

使用场景

01Identifying and remediating SQL injection flaws during the SDLC

02Verifying database hardening and firewall configuration effectiveness

03Performing authorized security audits on web application backends

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front sqlmap-database-pentesting

For use in Claude.ai and ChatGPT

Download Skill

主要功能

01Comprehensive database, table, and column enumeration

020 GitHub stars

03Sensitive data extraction and table dumping

04OS-level interaction and file system access capabilities

05Advanced WAF/IPS bypass using tamper scripts

06Automated SQL injection detection and exploitation

使用场景

01Identifying and remediating SQL injection flaws during the SDLC

02Verifying database hardening and firewall configuration effectiveness

03Performing authorized security audits on web application backends

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front sqlmap-database-pentesting

For use in Claude.ai and ChatGPT

Download Skill