sqli-sql-injection

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive SQL‑injection playbook that provides step‑by‑step techniques for data exfiltration (DNS/SMB/HTTP/OOB), credential theft (NTLM/hash capture), remote code execution and persistence (xp_cmdshell, UDFs, load_extension, DBMS_SCHEDULER, writing webshells/crontabs), and WAF evasion — clearly intended to enable malicious exploitation.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This playbook explicitly instructs how to perform filesystem writes (e.g., INTO OUTFILE, UDF shared libraries), enable OS command execution (xp_cmdshell, Java stored procs), and modify DB/server configuration to achieve code execution and persistent shells, which clearly pushes an agent to change and compromise the host system state.