
Security Fuzzing
This is a curated subset of the SecLists fuzzing collection, giving you SQL injection payloads, command injection tests, and special character sequences for vulnerability testing. You get the essentials like quick-SQLi.txt, MySQL-specific payloads, NoSQL injection strings, and auth bypass attempts without downloading the full 4.5GB SecLists repo. It's practical if you're doing authorized pen testing or bug bounties and need standard fuzzing lists without hunting through GitHub. The usual warnings apply: only use this on systems you have permission to test. The MIT license means you can use it freely, but being legal about where you point these payloads is entirely on you.
- skills.sh installs
- 626
- GitHub stars
- 400
- last updated
- Jun 8, 2026
Install
$ npx -y skills add eyadkelleh/awesome-skills-security --skill security-fuzzing --agent claude-codeInstalls into .claude/skills of the current project.
Files
SecLists Fuzzing (Curated)
Description
Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.
Source: SecLists/Fuzzing Repository: https://github.com/danielmiessler/SecLists License: MIT
When to Use This Skill
Use this skill when you need:
- SQL injection testing
- Command injection testing
- Input validation testing
- LDAP injection
- NoSQL injection
⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.
Key Files in This Skill
quick-SQLi.txt - Quick SQL injection testsGeneric-SQLi.txt - Generic SQL injectionsqli.auth.bypass.txt - Authentication bypassMySQL.fuzzdb.txt - MySQL-specific payloadsNoSQL.txt - NoSQL injection payloadscommand-injection-commix.txt - Command injection
Usage Example
# Access files from this skill
import os
# Example: Load patterns/payloads
skill_path = "references/Fuzzing"
Sponsors
Details
- Repository
- github.com/eyadkelleh/awesome-skills-security
- Categories
- Testing & QA, Security, Databases
- First seen
- Jun 11, 2026