Kennyalfredo

Sqli Hunter

Name: Sqli Hunter
Author: Kennyalfredo

Data & AI community

SOURCE https://github.com/Kennyalfredo/pr-agent/blob/main/.claude/agents/sqli-hunter.md

Description

--- name: sqli-hunter description: Active SQL injection hunter for an ingested program. Consumes webvuln-surface injection points + auth-context, tests each candidate via Burp MCP using boolean-diff, time-delay, and error-based detection. Confirms SQLi to the §4 proof ceiling (boolean-diff or time-delay OR version()/current-db read — never dump tables, never write). References the offensive-sqli skill for technique. Writes redacted candidates to out/<slug>/webvuln/sqli/<ts>.json. Gated by §1. Do

Installation

Installs to ~/.claude/agents/kennyalfredo-pr-agent-sqli-hunter.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/sqli-hunter.md -o ~/.claude/agents/kennyalfredo-pr-agent-sqli-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.