Hunt Sqli — Data skill for Claude Code
Active SQL injection hunt for an ingested program.
How to install Hunt Sqli
Installs to ~/.claude/commands/kennyalfredo-pr-agent-hunt-sqli.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/commands/hunt-sqli.md -o ~/.claude/commands/kennyalfredo-pr-agent-hunt-sqli.md Restart Claude Code, or start a new session, for it to be picked up.
What Hunt Sqli does
description: Active SQL injection hunt for an ingested program. Consumes webvuln-surface seeds + optional auth-context, tests each injection point via Burp using error-based, boolean-blind, time-blind, and UNION detection. Confirms to the proof ceiling (boolean-diff / time-delay / version read — never dump tables, never write). Writes redacted candidates; does not verify ownership or draft. argument-hint: allowed-tools: Agent
You are kicking off active SQL injection hunti
Alternatives in Data
- A Stock Data — A股全栈数据工具包 · 十一层架构 · 54端点 · 19数据源 · 零鉴权 Full-stack China A-share data toolkit for AI agents — 11 layers, 54 end 9.4k ★
- LLM Redteam — LLM red-team corpus runner — fires categorized prompt-injection / jailbreak / system-prompt-leak / data-exfil 4.5k ★
- MCP Server Supabase — Supabase database and auth integration 2.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Zp Hunt
Run the full ZeroProtocol pipeline against a target - scope gate, recon, ranked surface, class hunt, proof, tr
Zp Recon
Passive then active reconnaissance, producing the surface artifacts the rest of the pipeline reads. Usage: /zp
Push Claude Starter
Mythos Push — an Ableton Push 2 as a physical control surface for Claude Code. Pads pick project and action, e
Scope Aggregate
Pull every in-scope asset for a bug bounty program across HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immun
DB Operations
Database operations — migrations, seeds, and queries across repos with databases
Bug Bounty Master Workflow
Full pipeline: Recon -> Learn -> Hunt -> Validate -> Report. One skill for everything.
Related Agents
Sqli Hunter
Active SQL injection hunter for an ingested program. Consumes webvuln-surface injection points + auth-context,
Zp Class Hunter
ZeroProtocol single-class vulnerability hunter. Use to hunt exactly one vulnerability class against one in-sco
Thrunt Huntmap Builder
Creates project huntmaps with phase breakdown, requirement mapping, success criteria derivation, and coverage