Individual skill

injection

0upvotes

Injection vulnerability testing - SQL, NoSQL, OS Command, SSTI, XXE, and LDAP/XPath injection techniques.

skills/injection/SKILL.md

Read pinned source

Source commit 95fdc128af4ca1ae16b3226f9430f1bad97b0656

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: No
Repository scan complete: No
Skill scan complete: Yes
Observed behavior: Not checked yet
Last checked: Nov 5, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 611
Repository last updated: Jul 29, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

bounty-hunters Repository topic
hackerone Repository topic
pentest Repository topic
pentest-tool Repository topic
security Repository topic
security-research Repository topic
security-tools Repository topic
data Derived category
security Derived category
testing Derived category
data-databases Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 1,694 bytes
reference/INDEX.mddoc · 3,644 bytes
reference/injection-principles.mddoc · 6,596 bytes
reference/ldap-injection-quickstart.mddoc · 13,097 bytes
reference/nosql-injection-advanced.mddoc · 5,825 bytes
reference/nosql-injection-cheat-sheet.mddoc · 6,048 bytes
reference/nosql-injection-quickstart.mddoc · 4,644 bytes
reference/nosql-injection-resources.mddoc · 5,622 bytes
reference/os-command-injection-cheat-sheet.mddoc · 7,088 bytes
reference/os-command-injection-quickstart.mddoc · 4,547 bytes
reference/scenarios/code-injection/bash-symbolic-only-bypass.mddoc · 6,662 bytes
reference/scenarios/code-injection/php-preg-replace-e-modifier.mddoc · 2,182 bytes
reference/scenarios/code-injection/python-eval-format-string.mddoc · 3,786 bytes
reference/scenarios/nosql/cassandra-cql.mddoc · 4,586 bytes
reference/scenarios/nosql/elasticsearch-script-injection.mddoc · 4,057 bytes
reference/scenarios/nosql/mongo-aggregation-pipeline.mddoc · 4,458 bytes
reference/scenarios/nosql/mongo-operator-injection.mddoc · 4,185 bytes
reference/scenarios/nosql/mongo-syntax-injection.mddoc · 3,779 bytes
reference/scenarios/nosql/mongo-type-confusion.mddoc · 4,412 bytes
reference/scenarios/nosql/mongo-where-jsinjection.mddoc · 5,606 bytes
reference/scenarios/nosql/redis-ssrf-gopher.mddoc · 5,783 bytes
reference/scenarios/sql/auth-bypass.mddoc · 2,953 bytes
reference/scenarios/sql/boolean-blind.mddoc · 3,702 bytes
reference/scenarios/sql/error-based.mddoc · 3,453 bytes
reference/scenarios/sql/header-injection.mddoc · 3,511 bytes
reference/scenarios/sql/out-of-band.mddoc · 3,337 bytes
reference/scenarios/sql/per-dbms-mssql.mddoc · 5,117 bytes
reference/scenarios/sql/per-dbms-mysql.mddoc · 4,787 bytes
reference/scenarios/sql/per-dbms-oracle.mddoc · 5,605 bytes
reference/scenarios/sql/per-dbms-postgres.mddoc · 4,229 bytes
reference/scenarios/sql/second-order.mddoc · 4,089 bytes
reference/scenarios/sql/stacked-queries.mddoc · 5,029 bytes
reference/scenarios/sql/time-based-blind.mddoc · 4,038 bytes
reference/scenarios/sql/union-based.mddoc · 4,108 bytes
reference/scenarios/sql/waf-bypass.mddoc · 5,178 bytes
reference/scenarios/sql/where-clause-filter-bypass.mddoc · 3,211 bytes
reference/scenarios/ssti/double-render-quote-free-bypass.mddoc · 5,674 bytes
reference/sql-injection-advanced.mddoc · 10,084 bytes
reference/sql-injection-quickstart.mddoc · 8,470 bytes
reference/ssti-advanced.mddoc · 5,710 bytes
reference/ssti-cheat-sheet.mddoc · 6,937 bytes
reference/ssti-quickstart.mddoc · 4,459 bytes
reference/ssti-resources.mddoc · 5,070 bytes
reference/xpath-injection-quickstart.mddoc · 5,649 bytes
reference/xxe-cheat-sheet.mddoc · 6,763 bytes
reference/xxe-quickstart.mddoc · 4,765 bytes

Read excerpt


# Injection

Test for injection vulnerabilities across all input vectors. Covers SQL, NoSQL, Command, SSTI, XXE, and LDAP injection.

## Techniques

| Type | Key Vectors |
|------|-------------|
| **SQL Injection** | In-band (union, error), Blind (boolean, time), Out-of-band |
| **NoSQL Injection** | Operator injection, JavaScript injection, aggregation pipeline |
| **Command Injection** | OS command separators, blind techniques, out-of-band |
| **SSTI** | Template engine detection, sandbox escape, RCE chains |
| **XXE** | Entity expansion, SSRF via XXE, blind XXE, parameter entities |
| **LDAP/XPath** | Filter manipulation, authentication bypass |