# SQL Injection Testing

> This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". It provides comprehensive techniques for identifying, exploiting, and understanding SQL injection attack vectors across different database systems.

- Skill: `dokhacgiakhoa/sql-injection-testing` (Agent Skill, multi-file: 25 files)
- Install (CLI): `npx skillmds@latest add dokhacgiakhoa/sql-injection-testing`
- Raw SKILL.md: https://api.skillmd.com/api/skills/dokhacgiakhoa/sql-injection-testing/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: Dokhacgiakhoa (https://skillmd.com/u/dokhacgiakhoa)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/dokhacgiakhoa/sql-injection-testing

---


# SQL Injection Testing

## Purpose

Execute comprehensive SQL injection vulnerability assessments on web applications to identify database security flaws, demonstrate exploitation techniques, and validate input sanitization mechanisms. This skill enables systematic detection and exploitation of SQL injection vulnerabilities across in-band, blind, and out-of-band attack vectors to assess application security posture.

## Inputs / Prerequisites

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Required Access](./sub-skills/required-access.md)
### 2. [Technical Requirements](./sub-skills/technical-requirements.md)
### 3. [Legal Prerequisites](./sub-skills/legal-prerequisites.md)
### 4. [Primary Outputs](./sub-skills/primary-outputs.md)
### 5. [Evidence Artifacts](./sub-skills/evidence-artifacts.md)
### 6. [Phase 1: Detection and Reconnaissance](./sub-skills/phase-1-detection-and-reconnaissance.md)
### 7. [Phase 2: Exploitation Techniques](./sub-skills/phase-2-exploitation-techniques.md)
### 8. [Phase 3: Authentication Bypass](./sub-skills/phase-3-authentication-bypass.md)
### 9. [Phase 4: Filter Bypass Techniques](./sub-skills/phase-4-filter-bypass-techniques.md)
### 10. [Detection Test Sequence](./sub-skills/detection-test-sequence.md)
### 11. [Database Fingerprinting](./sub-skills/database-fingerprinting.md)
### 12. [Information Schema Queries](./sub-skills/information-schema-queries.md)
### 13. [Common Payloads Quick List](./sub-skills/common-payloads-quick-list.md)
### 14. [Operational Boundaries](./sub-skills/operational-boundaries.md)
### 15. [Technical Limitations](./sub-skills/technical-limitations.md)
### 16. [Legal and Ethical Requirements](./sub-skills/legal-and-ethical-requirements.md)
### 17. [Example 1: E-commerce Product Page SQLi](./sub-skills/example-1-e-commerce-product-page-sqli.md)
### 18. [Example 2: Blind Time-Based Extraction](./sub-skills/example-2-blind-time-based-extraction.md)
### 19. [Example 3: Login Bypass](./sub-skills/example-3-login-bypass.md)
### 20. [No Error Messages Displayed](./sub-skills/no-error-messages-displayed.md)
### 21. [UNION Injection Fails](./sub-skills/union-injection-fails.md)
### 22. [WAF Blocking Requests](./sub-skills/waf-blocking-requests.md)
### 23. [Payload Not Executing](./sub-skills/payload-not-executing.md)
### 24. [Time-Based Injection Inconsistent](./sub-skills/time-based-injection-inconsistent.md)