# SQL Injection

> SQL Injection attack and defense techniques

- Skill: `wgpsec/sql-injection` (Agent Skill)
- Install (CLI): `npx skillmds@latest add wgpsec/sql-injection`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wgpsec/sql-injection/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: wgpsec (https://skillmd.com/u/wgpsec)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/wgpsec/sql-injection

---


# SQL Injection

SQL injection is a code injection technique that exploits security vulnerabilities in an application's database layer.

## Steps

1. Identify injection points
2. Determine database type
3. Extract data using UNION or blind techniques