# sql-injection-testing

A skill that walks an agent through SQL injection testing on web apps: spotting injectable parameters, confirming the flaw, and getting past filters. Meant for pentests you are authorized to run.

- skill · `type=skill` · Claude Code · 605 installs
- Author: zebbern
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/sql-injection-testing
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/sql-injection-testing

## What it does

The skill splits the work into phases. Reconnaissance comes first: the agent looks for user-controlled input in URL parameters, form fields, cookies and headers, then probes each one with a quote or a semicolon and watches how the server reacts. Boolean payloads such as `OR 1=1` against `AND 1=2` confirm that the parameter really reaches a query.

Exploitation is organised by technique. UNION-based extraction starts with `ORDER BY` to count columns, error-based payloads pull data out of database messages, and blind boolean and time-based variants lean on `SLEEP` or `WAITFOR DELAY` when nothing is echoed back. Out-of-band covers DNS and HTTP channels. A separate phase handles login forms, including payloads like `admin'--` and `' OR '1'='1` with an explanation of how a comment cuts the password check out of the query. Filter bypass closes the skill: URL and double URL encoding, comments or tabs instead of spaces, mixed case and inline comments inside keywords.

You need a proxy such as Burp Suite, SQLMap installed, and a browser with developer tools. Familiarity with MySQL, MSSQL, PostgreSQL and Oracle syntax matters, since the payloads differ per database. Written authorization for the test is a hard requirement the skill states outright — running it against a system you do not own is not a grey area.

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --skill security/sql-injection-testing
```

2. **Skills CLI (Vercel)**
```bash
npx skills add davila7/claude-code-templates --skill sql-injection-testing -a claude-code
```

3. **Manually: put the files in place**
- File: `~/.claude/skills/sql-injection-testing/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/sql-injection-testing/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/sql-injection-testing/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/sql-injection-testing/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install davila7/claude-code-templates sql-injection-testing
```

2. **Manually: put the files in place**
- File: `.github/skills/sql-injection-testing/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/security/sql-injection-testing
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/sql-injection-testing/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/sql-injection-testing

## When to use it
- find parameters that reach a SQL query unsanitised
- confirm injection by comparing true and false conditions
- dump table and column names via UNION or database errors
- get past a login form with a comment in the username field
- slip a payload past quote and whitespace filters

## Example prompts
- Test the `?id=1` parameter on this URL for SQL injection and show me the server response
- Work out the column count with `ORDER BY` and pull the table list from `information_schema`
- Bypass the login form on my test instance using an injection in the username field

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 495 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md