Find SQL injection flaws and show their impact.
What it does
Finds SQL injection vulnerabilities in authorized web applications and documents their impact with evidence and remediation guidance.
When to use it
Use during authorized penetration tests to check web application inputs for SQL injection, validate defenses, and demonstrate confirmed vulnerabilities.
How to use it
Give it an authorized target web application; it tests for SQL injection and returns a finding with evidence, impact, and remediation.
What you provide
- the target web application
Uses
What you need · 3
Requires Burp Suite Professional configured as an intercepting proxy to capture and modify HTTP requests.
Requires a current version of sqlmap installed for automated detection and exploitation.
Access · 2
This skill
web applications under test
Sends SQL injection payloads
Burp Collaborator
Triggers Burp Collaborator callbacks