Claude MarketplacesSubmit
yaklang avatar

Sqli Sql Injection

yaklang/hack-skills

This is a comprehensive SQLi exploitation reference that goes well beyond basic UNION and error-based attacks. It covers database-specific blind inference techniques, out-of-band exfiltration through DNS, HTTP, and SMB channels, and second-order injection patterns across MySQL, MSSQL, Oracle, and PostgreSQL. The routing is smart: it links to a ghost-bits-cast attack for bypassing WAFs when you're hitting Java backends with Jackson, and splits advanced material into separate scenario and sqlmap docs you can load on demand. The first-pass payload table and DBMS fingerprinting section alone will save you from fumbling through trial and error. If you're doing actual penetration testing or need to explain modern SQLi techniques beyond the OWASP top ten basics, this gives you the tactical depth.

skills.sh installs
4.2K
GitHub stars
2.6K
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add yaklang/hack-skills --skill sqli-sql-injection --agent claude-code

Installs into .claude/skills of the current project.

Files

SKILL: SQL Injection — Expert Attack Playbook

AI LOAD INSTRUCTION: Advanced SQLi techniques. Assumes basic UNION/error/boolean-blind fundamentals known. Focuses on: per-database exploitation, out-of-band exfiltration, second-order injection, parameterized query bypass scenarios, filter evasion, and escalation to OS. For real-world CVE cases, SMB/DNS OOB exfiltration, INSERT/UPDATE injection patterns, and framework-specific exploitation (ThinkPHP, Django GIS), load the companion SCENARIOS.md.

0. RELATED ROUTING

  • ghost-bits-cast-attack when the backend is Java with Jackson and your SQL keywords are WAF-blocked — Jackson's charToHex table is indexed by ch & 0xFF, so a Unicode character like 丰 (U+4E30) resolves to hex digit 0 inside a \uXXXX escape sequence, letting you smuggle UNION, SELECT, 1, etc. without the WAF ever seeing them

1. QUICK START

Extended Scenarios

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/yaklang/hack-skills
Categories
Backend & APIs, Security, Databases
First seen
May 16, 2026

More from yaklang/hack-skills

All 102

Recommended

More Backend & APIs
1mongodb avatarmongodb-mcp-setupmongodb/agent-skillsGuide users through configuring key MongoDB MCP server options. Use this skill when a user has the MongoDB MCP server installed but hasn't configured the requir4.2Kskills.sh installs
2giuseppe-trisciuoglio avatartypescript-security-reviewgiuseppe-trisciuoglio/developer-kitProvides security review capability for TypeScript/Node.js applications, validates code against XSS, injection, CSRF, JWT/OAuth2 flaws, dependency CVEs, and sec4.1Kskills.sh installs
3dotnet avatarnuget-trusted-publishingdotnet/skillsSet up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens. USE FOR: trusted publishing, NuGet OIDC,4.1Kskills.sh installs
4softaworks avataropenapi-to-typescriptsoftaworks/agent-toolkitConverts OpenAPI 3.0 JSON/YAML to TypeScript interfaces and type guards. This skill should be used when the user asks to generate types from OpenAPI, convert sc4Kskills.sh installs
5yaklang avatar401-403-bypass-techniquesyaklang/hack-skills401/403 bypass playbook. Use when encountering access-denied responses on admin panels, API endpoints, or restricted paths. Covers path manipulation, HTTP metho4Kskills.sh installs
6tanstack-skills avatartanstack-starttanstack-skills/tanstack-skillsFull-stack React framework powered by TanStack Router with SSR, streaming, server functions, and deployment to any hosting provider.4Kskills.sh installs