About injection
injection is a security skill for finding and validating injection vulnerabilities across application inputs. It covers SQL, NoSQL, command, template, XML, LDAP, and XPath cases, from detection through evidence and PoC documentation.
Key features
- 01Covers SQL and NoSQL injection
- 02Tests command injection and SSTI
- 03Checks XXE, LDAP, and XPath
- 04Finds input vectors in parameters and headers
- 05Captures evidence and writes PoCs
Use cases
- 01Test web forms and API fields for injection
- 02Check authentication filters for bypasses
- 03Validate suspected injection with reproducible evidence
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/injectionin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
reference/INDEX.mdinjection-principles.mdldap-injection-quickstart.mdnosql-injection-advanced.mdnosql-injection-cheat-sheet.mdnosql-injection-quickstart.mdnosql-injection-resources.mdos-command-injection-cheat-sheet.mdos-command-injection-quickstart.mdreference/scenarios/code-injection/bash-symbolic-only-bypass.mdphp-preg-replace-e-modifier.mdpython-eval-format-string.mdreference/scenarios/nosql/cassandra-cql.mdelasticsearch-script-injection.mdmongo-aggregation-pipeline.mdmongo-operator-injection.mdmongo-syntax-injection.mdmongo-type-confusion.mdmongo-where-jsinjection.mdredis-ssrf-gopher.mdreference/scenarios/sql/auth-bypass.mdboolean-blind.mderror-based.mdheader-injection.mdout-of-band.mdper-dbms-mssql.mdper-dbms-mysql.mdper-dbms-oracle.mdper-dbms-postgres.mdsecond-order.mdDetails
From the project READMEInjection
Test for injection vulnerabilities across all input vectors. Covers SQL, NoSQL, Command, SSTI, XXE, and LDAP injection.
Techniques
| Type | Key Vectors |
|---|---|
| SQL Injection | In-band (union, error), Blind (boolean, time), Out-of-band |
| NoSQL Injection | Operator injection, JavaScript injection, aggregation pipeline |
| Command Injection | OS command separators, blind techniques, out-of-band |
| SSTI | Template engine detection, sandbox escape, RCE chains |
| XXE | Entity expansion, SSRF via XXE, blind XXE, parameter entities |
| LDAP/XPath | Filter manipulation, authentication bypass |
Workflow
- Identify injection points (parameters, headers, cookies, JSON fields)
- Detect injection type with minimal probes
- Exploit with context-appropriate payloads
- Escalate (data extraction, RCE, file read)
- Capture evidence and write PoC
Reference
reference/sql-injection*.md- SQL injection techniquesreference/nosql-injection*.md- NoSQL injection techniquesreference/os-command-injection*.md- OS command injectionreference/ssti*.md- Server-side template injectionreference/xxe*.md- XML external entity injectionreference/ldap-injection-quickstart.md- LDAP filter injection: detection, auth bypass, blind boolean extraction via(description=PREFIX*)chainingreference/xpath-injection-quickstart.md- XPath injection (CWE-643): lxml/Java/Node sinks,' or '1'='1' or 'a'='bboolean oracle, blind char-by-char extraction recipe
Comments
Markdown supported