Find SQL injection flaws in your web app.
What it does
Assesses web applications for SQL injection and produces vulnerability findings, exploitation evidence, and remediation advice.
When to use it
Use for authorized security assessments, defensive validation, or controlled educational testing, with written permission and confirmed scope.
How to use it
Give it a target web application and authorized testing scope; it produces a vulnerability report and supporting evidence, with write access required for reports.
What you provide
- the target URL
- permitted URLs and parameters
What you need · 2
Requires Burp Suite or an equivalent proxy tool for manipulating requests.
Requires an existing SQLMap installation for automated exploitation.
Access · 2
This skill
target web application
Sends injection probes to your target
attacker.com
Sends database data to attacker.com