This is a curated subset of the SecLists fuzzing collection, giving you SQL injection payloads, command injection tests, and special character sequences for vulnerability testing. You get the essentials like quick-SQLi.txt, MySQL-specific payloads, NoSQL injection strings, and auth bypass attempts without downloading the full 4.5GB SecLists repo. It's practical if you're doing authorized pen testing or bug bounties and need standard fuzzing lists without hunting through GitHub. The usual warnings apply: only use this on systems you have permission to test. The MIT license means you can use it freely, but being legal about where you point these payloads is entirely on you.

skills.sh installs
626
GitHub stars
400
last updated
Jun 8, 2026

Install

$ npx -y skills add eyadkelleh/awesome-skills-security --skill security-fuzzing --agent claude-code

Installs into .claude/skills of the current project.

Files

SecLists Fuzzing (Curated)

Description

Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.

Source: SecLists/Fuzzing Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

  • SQL injection testing
  • Command injection testing
  • Input validation testing
  • LDAP injection
  • NoSQL injection

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • quick-SQLi.txt - Quick SQL injection tests
  • Generic-SQLi.txt - Generic SQL injection
  • sqli.auth.bypass.txt - Authentication bypass
  • MySQL.fuzzdb.txt - MySQL-specific payloads
  • NoSQL.txt - NoSQL injection payloads
  • command-injection-commix.txt - Command injection

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Fuzzing"

Sponsors

Details

Repository
github.com/eyadkelleh/awesome-skills-security
Categories
Testing & QA, Security, Databases
First seen
Jun 11, 2026

More from eyadkelleh/awesome-skills-security

All 7
1eyadkelleh avatarsecurity-patternseyadkelleh/awesome-skills-securitySensitive data patterns for security testing: API keys, credit cards, emails, SSNs, phone numbers, IPs, and more. Use for data discovery and validation.625skills.sh installs
2tuist avatarusing-tuist-generated-projectstuist/agent-skillsGuides day-to-day work in Tuist-generated Xcode workspaces, including generation, build and test commands, and buildable folders. Use when working in a Tuist-ge616skills.sh installs
3antithesishq avatarantithesis-setupantithesishq/antithesis-skillsScaffold the Antithesis harness with docker-compose: initialize the working directory, write Dockerfiles and docker-compose.yaml with build directives, and prep615skills.sh installs
4withastro avatarastro-developerwithastro/astroComprehensive guide for developing in the Astro monorepo. Covers architecture, debugging, testing, and critical constraints. Use when working on features, fixes596skills.sh installs
5alirezarezvani avatarscenario-war-roomalirezarezvani/claude-skillsCross-functional what-if modeling for cascading multi-variable scenarios. Unlike single-assumption stress testing, this models compound adversity across all bus590skills.sh installs
6aaronontheweb avatarcrap-analysisaaronontheweb/dotnet-skillsAnalyze code coverage and CRAP (Change Risk Anti-Patterns) scores to identify high-risk code. Use OpenCover format with ReportGenerator for Risk Hotspots showin581skills.sh installs