offensive-sqli
覆盖多种数据库与利用向量，实战价值高且示例丰富。
含破坏性攻击方法和数据窃取手段，危险且需授权。
面向渗透测试的 SQL 注入发现、利用与绕过全面指南。
在渗透测试或漏洞狩猎时用来发现和利用各种 SQL 注入，从可见错误到盲注、NoSQL/GraphQL/JSON 层面的注入都覆盖。做输入向量枚举、数据库指纹、数据提取或绕过 WAF 时派上用场，并提供数据库专属利用思路和 SQLmap 自动化流程。
▸ 展开 SKILL.md 英文原文
SQL injection testing skill for offensive security assessments and bug bounty hunting. Covers error-based, UNION-based, boolean/time-based blind, out-of-band, second-order, NoSQL, GraphQL, WebSocket, and JSON-operator SQLi. Includes WAF bypass techniques, database-specific exploitation (MySQL, MSSQL, PostgreSQL, Oracle), cloud-native attack paths, ORM CVE tracking, and SQLmap automation. Use when performing web application SQL injection testing, database enumeration, privilege escalation via SQLi, or assessing injection vectors in APIs and modern stacks.
帮我安装这个 skill：https://raw.githubusercontent.com/SnailSploit/Claude-Red/main/Skills/web/offensive-sqli/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/SnailSploit/Claude-Red/main/Skills/web/offensive-sqli/SKILL.md"# SQL Injection — Offensive Testing Methodology ## Quick Workflow 1. Map all input vectors that reach the database (URL params, POST body, cookies, headers, API filters, WebSocket messages) 2. Insert probe payloads to detect classic SQLi; fall back to inferential (boolean/time-based) if no visible error 3. Identify database type and enumerate schema 4. Exploit to extract data, escalate privileges, or achieve RCE where in scope 5. Document findings and suggest remediation --- ## Detection ### Basic Probes — All Input Vectors ``` ' " ; -- /* */ # ) ( + , \ % ' OR '1'='1 " OR "1"="1 SLEEP(1) /*' or SLEEP(1) or '" or SLEEP(1) or "*/ ``` ### Error-Based Detection Trigger syntax errors to