domains / families / security / offensive-sqli

offensive-sqli

separate

SQL injection testing skill for offensive security assessments and bug bounty hunting. Covers error-based, UNION-based, boolean/time-based blind, out-of-band, second-order, NoSQL, GraphQL, WebSocket, and JSON-operator SQLi. Includes WAF bypass techniques, database-specific exploitation (MySQL, MSSQL, PostgreSQL, Oracle), cloud-native attack paths, ORM CVE tracking, and SQLmap automation. Use when performing web application SQL injection testing, database enumeration, privilege escalation via SQLi, or assessing injection vectors in APIs and modern stacks.

When to use

• web application SQL injection testing
• database enumeration
• privilege escalation via SQLi
• assessing injection vectors in APIs and modern stacks
• WAF bypass techniques
• database-specific exploitation
• cloud-native attack paths
• ORM CVE tracking

Skill page

Source