SecurityTesting_SQLI-SSTI-RCE

🥈Silver

@Ruhanyat-994

Got Reverse Shell , Combining Manual Testing Skills and Automation tools Skills!

500Updated 1w ago

Intermediate30min to implementautomation

Saves ~180 min per use

Quick InstallView Source

git clone https://github.com/Ruhanyat-994/SecurityTesting_SQLI-SSTI-RCE.git

Works with:

Claude

Overview

About This Skill

Got Reverse Shell , Combining Manual Testing Skills and Automation tools Skills!

Setup & Installation

Quick Install

No install command available. Check the GitHub repository for manual installation instructions.

Alternative Install (Git Clone)

git clone https://github.com/Ruhanyat-994/SecurityTesting_SQLI-SSTI-RCE

Requirements

Claude Code or compatible AI agent
Works with: Claude

Quick Start Guide

Install the Skill

Copy the install command above and run it in your terminal.

Open Your AI Agent

Launch Claude Code, Cursor, or your preferred AI coding agent.

Try It Out

Use the prompt template or examples below to test the skill.

Customize

Adapt the skill to your specific use case and workflow.

Usage Examples

Prompt Template

I need to test a web application for SQL Injection, Server-Side Template Injection (SSTI), and Remote Code Execution (RCE) vulnerabilities. The application is for [COMPANY] in the [INDUSTRY] sector. I have access to [DATA] such as API endpoints, user inputs, and server configurations. Can you provide a step-by-step guide to automate the testing process using tools like Burp Suite, OWASP ZAP, and custom scripts?

Example Output

## Security Testing Guide for SQL Injection, SSTI, and RCE

### Step 1: SQL Injection Testing
- **Tools**: Burp Suite, SQLmap
- **Process**:
  1. Identify input fields and parameters.
  2. Use Burp Suite to intercept requests and inject SQL payloads.
  3. Automate with SQLmap for comprehensive testing.

### Step 2: Server-Side Template Injection (SSTI) Testing
- **Tools**: OWASP ZAP, Custom Scripts
- **Process**:
  1. Identify template engines used (e.g., Jinja2, Twig).
  2. Inject template payloads to test for SSTI vulnerabilities.
  3. Automate with OWASP ZAP and custom scripts.

### Step 3: Remote Code Execution (RCE) Testing
- **Tools**: Metasploit, Custom Scripts
- **Process**:
  1. Identify potential entry points for RCE.
  2. Use Metasploit to test for known vulnerabilities.
  3. Automate with custom scripts for specific scenarios.

### Step 4: Reporting and Mitigation
- **Tools**: Jira, Confluence
- **Process**:
  1. Document findings in Jira.
  2. Create detailed reports in Confluence.
  3. Provide mitigation strategies and patches.