domains / families / security / sqli-sql-injection

sqli-sql-injection

separate

SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, filtering, reporting, or DB-specific blind and out-of-band execution paths.

When to use

• SQL injection exploitation
• Authentication logic injection
• Sorting and filtering injection
• Reporting injection
• Blind and out-of-band execution
• Second-order injection
• Parameterized query bypass
• Filter evasion

When not to use

• Basic UNION/error/boolean-blind fundamentals

Skill page

Source