sqli-sql-injection
sqli sql injection
What it does
- SMB out-of-band exfiltration via LOADFILE + UNC paths (Windows MySQL)
- KEY injection / URI injection / non-parameter injection points
- INSERT/DELETE/UPDATE statement injection differences
- ThinkPHP5 array key injection (updatexml error-based)
- Django GIS Oracle utlinaddr.gethostname CVE
- ORDER BY / LIMIT injection techniques
- SQLMap tamper scripts matrix and WAF bypass tamper chain recipes (space2comment, between, charencode, etc.)
Requirements & configuration
- Also load SCENARIOS.md when you need:
- Also load SQLMAPADVANCED.md when you need:
- MSSQL — OpenRowSet (requires SQLOLEDB, outbound TCP)
- Enable if disabled (requires sysadmin):
- SELECT username,password FROM dbausers -- requires DBA
Configuration: UNIONSELECTLOAD_FILESLEEPWAITFORHASH_VALUECREATECHAR
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
sqli-sql-injection FAQ
What does the sqli-sql-injection skill do?
>- SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths. SMB out-of-band exfiltration via LOADFILE + UNC paths (Windows MySQL) KEY injection / URI injection / non-parameter injection points
What does sqli-sql-injection require?
Also load SCENARIOS.md when you need: Also load SQLMAPADVANCED.md when you need: MSSQL — OpenRowSet (requires SQLOLEDB, outbound TCP) Enable if disabled (requires sysadmin): SELECT username,password FROM dbausers -- requires DBA Configuration keys: UNION, SELECT, LOAD_FILE, SLEEP, WAITFOR, HASH_VALUE, CREATE, CHAR.
How do I install sqli-sql-injection?
Run: npx -y skills add https://github.com/yaklang/hack-skills --skill sqli-sql-injection --agent claude-code — the source lives at github.com/yaklang/hack-skills.
Maintain sqli-sql-injection?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[sqli-sql-injection on getagentictools](https://getagentictools.com/skills/yaklang-hack-skills-sqli-sql-injection?ref=badge) npx agentictools info skills/yaklang-hack-skills-sqli-sql-injection The second line is the CLI lookup for this page — handy in READMEs and docs.
