Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
A reference for SQL injection vulnerability assessment in authorized penetration tests. Covers detection methods, exploitation techniques across MySQL, MSSQL, PostgreSQL, and Oracle, and filter bypass strategies. Also includes code review patterns for identifying vulnerable versus safe query implementations.
Combines detection, exploitation, and evasion techniques for four major database engines in one reference, cutting the need to cross-reference multiple sources during a time-limited engagement.
When to use it
- Testing login forms for authentication bypass during a pentest
- Identifying injectable URL parameters in a web application audit
- Validating WAF rules against encoded or obfuscated SQL payloads
- Checking whether parameterized queries are correctly implemented in a code review
- Extracting proof-of-concept data from a test database to demonstrate impact
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: 'Test the login form at POST /login for SQL injection on the username field'
- 1Inserts a single quote into the username field and checks for database error messages or HTTP 500 responses
- 2Applies boolean logic tests (OR 1=1-- and AND 1=2--) and compares response length and content
- 3Attempts authentication bypass payloads such as admin'-- to confirm exploitability
- 4Uses time-based blind injection (SLEEP(5) or WAITFOR DELAY) if no visible error response is returned
- 5Documents the injectable parameter, payload used, and database type identified
Confirmed SQL injection in username field; login bypassed with admin'--; database fingerprinted as MySQL 8.0; recommended fix: parameterized queries