Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →asdfgh1445/Strix•sqlmap 用法
Strix sqlmap 命令手册,覆盖目标语法、无交互执行与常见枚举流程;触发名:strix-sqlmap
Passed 20 of 22 test cases with the skill, and 16 of 22 without it.
and 2 more in the full report
5 fixed15 passed either way1 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
If environment proxy variables (like HTTP_PROXY) are set globally, which flag forces direct connections to the target server?
| Checked | Without skill | With skill |
|---|---|---|
| The command includes --ignore-proxy to bypass configured proxies. | Missed | Passed |
The instructions your model reads when the skill loads.
Official docs:
Canonical syntax:
sqlmap -u "<target_url_with_params>" [options]
High-signal flags:
-u, --url <url> target URL-r <request_file> raw HTTP request input-p <param> test specific parameter(s)--batch non-interactive mode--level <1-5> test depth--risk <1-3> payload risk profile--threads <n> concurrency--technique <letters> technique selection--forms parse and test forms from target page--cookie <cookie> and --headers <headers> authenticated context--timeout <seconds> and --retries <n> transport stability--tamper <scripts> WAF/input-filter evasion--random-agent randomize user-agent--ignore-proxy bypass configured proxy--dbs, -D <db> --tables, -D <db> -T <table> --columns, -D <db> -T <table> -C <cols> --dump--flush-session clear cached scan stateAgent-safe baseline for automation:
sqlmap -u "https://target.tld/item?id=1" -p id --batch --level 2 --risk 1 --threads 5 --timeout 10 --retries 1 --random-agent
Common patterns:
sqlmap -u "https://target.tld/item?id=1" -p id --batch --level 2 --risk 1 --threads 5sqlmap -u "https://target.tld/login" --data "user=admin&pass=test" -p pass --batch --level 2 --risk 1sqlmap -u "https://target.tld/login" --forms --batch --level 2 --risk 1 --random-agentsqlmap -u "https://target.tld/item?id=1" -p id --batch --dbstest cases passed, vs 16 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.