# sqlmap-database-pentesting

Guides database penetration testing workflows using sqlmap. Helps security professionals systematically verify injection points and inspect schemas.

- skill · `type=skill` · Claude Code · 116 installs
- Author: zebbern
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/sqlmap-database-pentesting
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/sqlmap-database-pentesting

## What it does

This skill guides your assistant through structured database penetration testing workflows. It starts with confirming a susceptible parameter and moves forward to enumerating schemas, tables, and specific fields. Engines like MySQL and PostgreSQL receive direct coverage. Routine inspection steps become faster.

The guidance includes multiple ways to supply targets to sqlmap, such as raw Burp Suite request files or bulk address lists. It details techniques like error-based checks, UNION queries, and time-based blind injection. Dumping large datasets requires patience due to network round-trips.

Intrusion prevention systems or web application firewalls frequently drop scanner traffic. You must have sqlmap installed locally and hold written authorization before launching scans.

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --skill security/sqlmap-database-pentesting
```

2. **Skills CLI (Vercel)**
```bash
npx skills add davila7/claude-code-templates --skill sqlmap-database-pentesting -a claude-code
```

3. **Manually: put the files in place**
- File: `~/.claude/skills/sqlmap-database-pentesting/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/sqlmap-database-pentesting/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/sqlmap-database-pentesting/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/sqlmap-database-pentesting/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install davila7/claude-code-templates sqlmap-database-pentesting
```

2. **Manually: put the files in place**
- File: `.github/skills/sqlmap-database-pentesting/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/security/sqlmap-database-pentesting
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/sqlmap-database-pentesting/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/sqlmap-database-pentesting

## When to use it
- Identify vulnerable parameters across web application endpoints
- Generate sqlmap flags for database schema enumeration
- Replay captured HTTP requests from Burp Suite for injection testing
- Select suitable blind injection techniques when error messages are suppressed

## Example prompts
- Construct a batch-mode sqlmap command to test the id parameter for SQL injection
- Show how to enumerate database tables using a saved Burp Suite request file
- Which sqlmap flags should I use for time-based blind testing on a slow target?

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 804 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md