Injection Testing Skill (Miscellaneous)

Purpose

Validate miscellaneous injection vulnerabilities by sending crafted payloads to user-controlled inputs and observing:

• Template evaluation (SSTI)
• Query manipulation (LDAP, XPath, XQuery, GraphQL, ORM/HQL)
• Header manipulation (CRLF, HTTP Header, Email Header)
• Expression/code evaluation (EL, OGNL, Spring EL, JavaScript eval)
• Resource exhaustion (ReDoS)
• Formula execution (CSV/Spreadsheet injection)
• Config manipulation (YAML, Environment variables)

Scope Note

This skill covers injection types WITHOUT dedicated skills.