SQL injection — error-based, blind boolean, time-based ve UNION tekniklerini kapsar; CTF'te login bypass, veri çekme ve flag okumak için tam otomatik exploit şablonları içerir
The English summary is being prepared. Showing the original description.
1.5K skills · sorted by relevance
SQL injection — error-based, blind boolean, time-based ve UNION tekniklerini kapsar; CTF'te login bypass, veri çekme ve flag okumak için tam otomatik exploit şablonları içerir
The English summary is being prepared. Showing the original description.
Detecting and exploiting SQL injection vulnerabilities using sqlmap to extract database contents during authorized penetration tests.
The English summary is being prepared. Showing the original description.
Tests APIs for injection vulnerabilities including SQL injection, NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF) through API parameters, headers, and request bodies. The tester crafts malicious payloads targeting different backend technologies and injection contexts to extract data, execute commands, or access internal services. Maps to OWASP API8:2023 Security Misconfiguration and API7:2023 SSRF. Activates for requests involving API injection testing, SQLi in APIs, NoSQL injection, SSRF testing, or API input validation assessment.
The English summary is being prepared. Showing the original description.
Design and improve database access in Spring Boot with JPA/Hibernate, tools that map Java objects to database tables. Covers relationships, queries, transactions, and pagination, including fixes for excessive database queries.
Plan database schema and data changes for production systems. Use staged column replacements, concurrent index creation, and batched data updates to limit disruption, with migration workflows for PostgreSQL, Prisma, Drizzle, Kysely, Django, and golang-migrate.
Implement core TypeScript modules for claude-flow v3 using domain-driven design, which organizes code around distinct responsibilities. Build task and session domains, connect storage and services, and add unit and integration tests.
Implement core TypeScript modules for claude-flow v3 using domain-driven design, which organizes code around distinct responsibilities. Build task and session domains, connect storage and services, and add unit and integration tests.
Check a Twenty pull request through real browser scenarios derived from its changes. Verify database effects and server logs alongside visible results, then produce screenshots, a structured verdict, and a report of any failures or uncertainty.
Manage SiYuan notebooks, documents, and blocks, the individual pieces of note content, from the terminal. Search your knowledge base, create or update notes, inspect document structure, and export documents as Markdown through its local API.
Build Python code for Azure Cosmos DB's NoSQL API to create, read, update, delete, and query documents. Covers authentication, containers for storing data, partition keys for distributing records, throughput settings, asynchronous operations, and error handling.
Implement Azure Cosmos DB document operations in Rust using its NoSQL SDK. The skill covers authentication, database and container clients, creating and reading records, replacing or patching fields, and deleting items with partition keys.
Coordinate authorized penetration testing with tools for port discovery, vulnerability scanning, web testing, and password hash recovery. Use MCP servers to connect agents to security tools, record reproducible evidence, and support reporting within the approved scope.
Turn application requirements into an Azure Cosmos DB NoSQL data model. Gather read and write patterns, workload volumes, and relationships, then document container structures, partition keys for distributing data, indexes, and design trade-offs in two Markdown files.
Design a database layer from business requirements, access patterns, and expected growth. Compare database technologies, define tables and relationships, and plan indexes, caching, scaling, migrations, backups, and recovery with clear reasons and trade-offs.
Connect a company SQL database, support ticket exports, and documents in cognee, linking shared people, teams, and projects so questions about ownership, decisions, and ongoing work can draw on several sources together.
Design and implement Google Cloud serverless web apps with separate presentation, application, and data layers. Produces architecture diagrams, Terraform infrastructure code, deployment instructions, and validation scripts for private networking and controlled access between layers.
Evaluate Google Cloud workloads against built-in best practices or custom organizational rules using Workload Manager. Use public client libraries or the REST API to run checks, review violations and scanned resources, and export results to BigQuery.
Helps explore datasets, clean missing or inconsistent values, and explain patterns through statistics and charts. Uses Python and SQL to compare groups, examine relationships, and present findings in plain language with documented analysis steps.
Find the Wren CLI workflow for answering data questions, connecting databases or SaaS sources, generating model definitions, adding business metrics, or building a shareable analytics app. Guides are retrieved from the installed CLI version.
Helps you start an Open SaaS project by checking Wasp installation and guiding setup for your operating system. Using the Getting Started guide, it assists with database startup, database migrations, and running the development server.
Implement application security controls, including login, access permissions, password hashing, and input validation. The skill provides code, configuration requirements, and testing guidance for checking protections against unauthorized access, malicious input, and sensitive data exposure.
Build Python APIs with FastAPI and Pydantic V2, including input validation, database operations that avoid blocking other work, and token-based authentication. Implement REST or WebSocket endpoints, then check their behavior with automated tests and generated API documentation.
Use a defined database structure and business rules to query products, warehouses, stock levels, and stock movements. It supports inventory checks and SQL for identifying products whose combined warehouse stock has reached the reorder threshold.
Use defined customer and order tables to build sales analysis queries with consistent business rules. Calculate revenue from completed orders, rank customers by spending, and identify high-value orders using the supplied thresholds and SQL example.