Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →asdfgh1445/Strix•SQL 注入
Strix SQL 注入测试手册,覆盖 union、blind、error-based 与 ORM 绕过技巧;触发名:strix-sql-injection
Passed 21 of 22 test cases with the skill, and 19 of 22 without it.
2 fixed19 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
To prevent generating excessive database load or ambient delay noise during time-based blind SQL injection testing, how should the sleep function call be structured inside the payload?
| Checked | Without skill | With skill |
|---|---|---|
| Gate the delay inside a conditional predicate. | Missed | Passed |
The instructions your model reads when the skill loads.
SQLi remains one of the most durable and impactful vulnerability classes. Modern exploitation focuses on parser differentials, ORM/query-builder edges, JSON/XML/CTE/JSONB surfaces, out-of-band exfiltration, and subtle blind channels. Treat every string concatenation into SQL as suspect.
Databases
Integration Paths
Input Locations
whereRaw/orderByRaw, string templates in ORMsError-Based
Boolean-Based
Time-Based
SLEEP/pg_sleep/WAITFOROut-of-Band (OAST)
test cases passed, vs 19 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.