SQL Injection Audit (offensive-sqli)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

SQL injection auditing and verification methodology covering error-based, boolean/time-based blind, out-of-band (OOB) detection, database-specific syntax differences (PostgreSQL, MySQL, MSSQL, Oracle, SQLite), second-order SQLi, ORM query builder pitfalls, and parameterized query remediation. Use when auditing web endpoints, database queries, or reviewing source code for SQL injection flaws.

Operational Workflow