Test Web Applications for SQL Injection Vulnerabilities

SQL Injection Testing executes comprehensive vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms. It systematically detects and exploits SQL injection vulnerabilities through UNION-based extraction, error-based leakage, blind boolean inference, time-based confirmation, and out-of-band data exfiltration. The skill covers detection workflows, exploitation techniques, authentication bypass methods, and filter evasion strategies for MySQL, MSSQL, PostgreSQL, and Oracle systems.

Use this skill when you have explicit written authorization for penetration testing, defined scope including target URLs and parameters, and established emergency contact procedures. Apply it during authorized security assessments, defensive validation of input sanitization, or controlled educational environments with disposable VMs or sandboxes. Do NOT use this skill without written permission from the system owner - misuse is illegal. Do NOT proceed without confirming the exact target, authorization scope, and expected command effects in the current conversation.

You provide the target web application URL with injectable parameters, written authorization documentation, defined testing scope, and access to proxy tools for request manipulation. Technical prerequisites include understanding of SQL query syntax across database platforms, knowledge of HTTP request/response cycles, and familiarity with database schemas.

You receive findings from SQL injection vulnerability testing, extracted database schemas and table structures, authentication bypass demonstrations, and remediation recommendations. Documentation includes HTTP request/response logs and payload examples.

The skill works with Burp Suite or equivalent proxy tools, SQLMap installation, and browser developer tools. It queries information_schema tables for enumeration across MySQL, MSSQL, PostgreSQL, and Oracle database platforms.

This skill serves authorized penetration testers conducting security assessments, security engineers validating application defenses, and security researchers in controlled lab environments. It provides systematic detection workflows starting with basic vulnerability indicators:

-- Single quote test
'

-- Double quote test
"

-- Comment sequences
--
#
/**/

-- Semicolon for query stacking
;

-- Parentheses
)

The skill advances through UNION-based extraction to enumerate database structures:

-- Determine column count
ORDER BY 1--
ORDER BY 2--
ORDER BY 3--
-- Continue until error occurs

-- Find displayable columns
UNION SELECT NULL,NULL,NULL--
UNION SELECT 'a',NULL,NULL--
UNION SELECT NULL,'a',NULL--

-- Extract data
UNION SELECT username,password,NULL FROM users--
UNION SELECT table_name,NULL,NULL FROM information_schema.tables--
UNION SELECT column_name,NULL,NULL FROM information_schema.columns WHERE table_name='users'--

Common injection points include URL parameters (?id=1, ?user=admin), form fields (username, password, search), cookie values (session_id, user_preference), and HTTP headers (User-Agent, Referer, X-Forwarded-For).