Kennyalfredo

Hunt Sqli

Name: Hunt Sqli
Author: Kennyalfredo

Data community

SOURCE https://github.com/Kennyalfredo/pr-agent/blob/main/.claude/commands/hunt-sqli.md

Description

--- description: Active SQL injection hunt for an ingested program. Consumes webvuln-surface seeds + optional auth-context, tests each injection point via Burp using error-based, boolean-blind, time-blind, and UNION detection. Confirms to the proof ceiling (boolean-diff / time-delay / version read — never dump tables, never write). Writes redacted candidates; does not verify ownership or draft. argument-hint: <program-slug> allowed-tools: Agent --- You are kicking off active SQL injection hunti

Installation

Installs to ~/.claude/commands/kennyalfredo-pr-agent-hunt-sqli.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/commands/hunt-sqli.md -o ~/.claude/commands/kennyalfredo-pr-agent-hunt-sqli.md

Restart Claude Code, or start a new session, for it to be picked up.