Automate SQL Injection Detection and Exploitation

This skill provides systematic methodologies for automated SQL injection detection and exploitation using SQLMap. It covers database enumeration, table and column discovery, data extraction, multiple target specification methods, and advanced exploitation techniques across MySQL, PostgreSQL, MSSQL, Oracle, and other database management systems. The skill guides you through the complete workflow from identifying vulnerable parameters to extracting sensitive data including usernames, passwords, and hash values.

Use this skill when you have written authorization for penetration testing activities and need to assess SQL injection vulnerabilities in web applications. It's ideal for security assessments where you've identified or suspect injectable parameters in URLs, POST requests, or other HTTP inputs. Use it when you need to enumerate database structures, extract credentials, or validate the severity of SQL injection findings.

Do NOT use this skill without explicit written permission for penetration testing. Never use Google dork attacks against unknown sites - this is illegal. Avoid using SQLMap against systems outside your authorized scope or when you lack documented engagement rules.

You provide a target URL with an injectable parameter (e.g., ?id=1), SQLMap installation, a verified or suspected injection point, optionally a captured HTTP request file for POST-based injection, and written authorization for testing.

You receive database enumeration (list of all databases on the target server), table structure (complete table names within target database), column mapping (column names and data types for each table), extracted data (dumped records including usernames, passwords, and sensitive data), password hash values for offline cracking, and a vulnerability report confirming SQL injection type and severity.

The skill supports multiple target specification methods. You can load HTTP requests from files using the -r flag, parse targets from log files using the -l option, test multiple URLs from a bulk file with the -m flag, or use Google dorks with the -g option for authorized targets only.

This skill is for penetration testers and security professionals conducting authorized database security assessments. It's designed for those who need to systematically test web applications for SQL injection vulnerabilities and extract proof-of-concept data. The skill serves both beginners following the structured enumeration workflow and advanced users leveraging multiple target specification methods and custom injection techniques.

# Basic vulnerability detection
sqlmap -u "http://target.com/page.php?id=1" --batch

# List databases
sqlmap -u "http://target.com/page.php?id=1" --dbs --batch

# List tables in specific database
sqlmap -u "http://target.com/page.php?id=1" -D database_name --tables --batch

# Dump specific columns
sqlmap -u "http://target.com/page.php?id=1" -D database_name -T users -C username,password --dump --batch