SQL Injection Testing

This is a security testing template that walks Claude through SQL injection vulnerability assessments on web applications. It covers in-band, blind, and out-of-band attack vectors and expects you to have SQLMap installed, Burp Suite or similar proxy tools, and a working knowledge of SQL syntax across major database engines. The skill is part of davila7's template collection with 27.7K GitHub stars. Use this when you need to systematically test input sanitization and identify database security flaws in your web apps. It's structured around demonstration and validation rather than automated scanning, so you'll be working through exploitation techniques manually with Claude's guidance. Obviously only run this against applications you're authorized to test.

GitHub stars: 30.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill 'SQL Injection Testing' --agent claude-code

Installs into .claude/skills of the current project.

Files

SQL Injection Testing

Purpose

Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms. This skill enables systematic detection and exploitation of SQL injection vulnerabilities across in-band, blind, and out-of-band attack vectors to assess application security posture.