Skill UI

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

A comprehensive and advanced playbook for mastering SQL injection techniques. It covers critical areas including WAF bypass, out-of-band data exfiltration, second-order injection, and exploitation strategies across major database systems (MySQL, MSSQL, Oracle, PostgreSQL). Essential for professional penetration testing and security auditing.

This file is currently undergoing Japanese localization for MySQL patterns. It serves as a placeholder indicating that the Japanese translation is in progress. Users should refer to the original English skill file for implementation details.

This skill is a comprehensive tool for managing and understanding SQL queries. It can explain complex SQL in plain English for non-technical stakeholders, optimize slow queries by identifying performance bottlenecks, generate functional SQL code from natural language prompts, and produce detailed query documentation and data dictionaries. Supports major dialects including PostgreSQL, MySQL, and BigQuery.

This skill guides the implementation of dynamic secrets using HashiCorp Vault. It focuses on generating short-lived, ephemeral credentials for services like databases (PostgreSQL, MySQL), AWS IAM, and PKI certificates. By automating credential generation, lease management, and rotation, it eliminates the risk associated with storing long-lived static secrets, ensuring compliance with zero-trust security models (PCI-DSS, NIST).

A comprehensive guide to safe and reversible database migration patterns. Covers zero-downtime schema changes, data backfilling, and rollbacks for major databases like PostgreSQL and MySQL, and popular ORMs (Prisma, Drizzle, Django). Learn techniques like concurrent indexing and the expand-contract pattern to ensure production stability.

This file is currently undergoing Japanese localization for MySQL patterns. It serves as a placeholder indicating that the Japanese translation is in progress. Users should refer to the original English skill file for implementation details.

A comprehensive guide for conducting authorized database security assessments across various platforms (PostgreSQL, MySQL, MSSQL, Mongo, Redis). Covers critical areas including exposure analysis, authentication, authorization checks, misconfiguration review, and attack chain validation, ensuring non-destructive testing practices are followed.