domains / families / security / injection-checking

injection-checking

separate

Entry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XXE, SSTI, command injection, and NoSQL injection workflows based on how attacker-controlled input is consumed.

When to use

• Input reaches HTML, JS, SQL, templates, URL fetchers, XML parsers, or shell
• You have not yet decided whether to start with XSS, SQLi, SSRF, XXE, SSTI, CMDi, or NoSQL
• You need to choose the correct deep-topic skill based on input flow

When not to use

• Executing specific injection payloads
• Performing file access vulnerability testing

Skill page

Source