Injection Vulnerability Hunter

Purpose

Identify injection vulnerabilities by tracing user input from sources to dangerous sinks. Covers SQL injection, OS command injection, XSS, SSTI, path traversal, LDAP injection, and XML injection.

Focus Areas

• SQL Injection: String concatenation in queries, ORM bypass
• Command Injection: Unsanitized input in system(), exec(), shell commands
• XSS (Cross-Site Scripting): Reflected, stored, DOM-based
• SSTI (Server-Side Template Injection): User input in templates
• Path Traversal: User input in file paths without sanitization
• LDAP/XML/Header Injection: Protocol-specific injection attacks

Taint Analysis Approach