sqlmap-database-pentesting — Claude Code skill: how to install
Guides database penetration testing workflows using sqlmap. Helps security professionals systematically verify injection points and inspect schemas.
npx claude-code-templates@latest --skill security/sqlmap-database-pentestingWhat sqlmap-database-pentesting does
This skill guides your assistant through structured database penetration testing workflows. It starts with confirming a susceptible parameter and moves forward to enumerating schemas, tables, and specific fields. Engines like MySQL and PostgreSQL receive direct coverage. Routine inspection steps become faster.
The guidance includes multiple ways to supply targets to sqlmap, such as raw Burp Suite request files or bulk address lists. It details techniques like error-based checks, UNION queries, and time-based blind injection. Dumping large datasets requires patience due to network round-trips.
Intrusion prevention systems or web application firewalls frequently drop scanner traffic. You must have sqlmap installed locally and hold written authorization before launching scans.
What it helps with
- Identify vulnerable parameters across web application endpoints
- Generate sqlmap flags for database schema enumeration
- Replay captured HTTP requests from Burp Suite for injection testing
- Select suitable blind injection techniques when error messages are suppressed
Example prompts for the agent
- Construct a batch-mode sqlmap command to test the id parameter for SQL injection
- Show how to enumerate database tables using a saved Burp Suite request file
- Which sqlmap flags should I use for time-based blind testing on a slow target?
How to install sqlmap-database-pentesting
1claude-code-templates
npx claude-code-templates@latest --skill security/sqlmap-database-pentesting2Skills CLI (Vercel)
npx skills add davila7/claude-code-templates --skill sqlmap-database-pentesting -a claude-code3Manually: put the files in place
~/.claude/skills/sqlmap-database-pentesting/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/sqlmap-database-pentesting/
Manually: put the files in place
.agents/skills/sqlmap-database-pentesting/SKILL.mdFor all projects use ~/.agents/skills/
Manually: put the files in place
.cursor/skills/sqlmap-database-pentesting/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install davila7/claude-code-templates sqlmap-database-pentesting2Manually: put the files in place
.github/skills/sqlmap-database-pentesting/SKILL.mdPlatform CLI
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/security/sqlmap-database-pentestingManually: put the files in place
.devin/skills/sqlmap-database-pentesting/SKILL.mdThe legacy .windsurf/skills/ path still works
Claude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about sqlmap-database-pentesting
How to install sqlmap-database-pentesting in Claude Code?
Run npx claude-code-templates@latest --skill security/sqlmap-database-pentesting in your terminal to add the skill to Claude Code.
What does sqlmap-database-pentesting do?
It equips the coding agent with standard procedures for finding SQL injection flaws and running sqlmap. It assists in building commands to discover databases, tables, and columns safely.
What prerequisites are needed to use this skill?
You need sqlmap installed on your machine, network reachability to the target, and documented written permission to perform security testing.