Curated username lists pulled from SecLists for authorized security testing. You get the essentials: common usernames, default credentials, and name lists without downloading the full 4.5GB SecLists repo. Useful for pentesting engagements, bug bounties, or CTF challenges where you need to enumerate users or test default creds. The skill includes the top shortlist, CIRT default usernames, and common first/last names. Standard disclaimer applies: this is strictly for authorized testing with permission. If you're doing regular security work and don't want to manage the full SecLists collection, this gives you the username enumeration basics in a ready-to-use format.

skills.sh installs
577
GitHub stars
400
last updated
Jun 8, 2026

Install

$ npx -y skills add eyadkelleh/awesome-skills-security --skill security-usernames --agent claude-code

Installs into .claude/skills of the current project.

Files

SecLists Usernames (Curated)

Description

Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.

Source: SecLists/Usernames Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

  • Username enumeration (authorized)
  • Default credential testing
  • User discovery
  • Account validation

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • top-usernames-shortlist.txt - Most common usernames
  • cirt-default-usernames.txt - Default system usernames
  • Names/names.txt - Common first/last names

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Usernames"

Sponsors

Details

Repository
github.com/eyadkelleh/awesome-skills-security
Categories
Testing & QA, Security
First seen
Jun 11, 2026

More from eyadkelleh/awesome-skills-security

All 7
1notedit avatarfeature-devnotedit/happy-skillsGuided feature development with codebase understanding and architecture focus. Use for implementing features systematically: explore → clarify → design → implem544skills.sh installs
2longbridge avatarlongbridge-financial-checkuplongbridge/skillsSystematic 100-point financial health scorecard for listed companies via Longbridge — five dimensions: profitability (ROE / net margin / gross margin), growth (515skills.sh installs
3horuz-ai avatarwebsite-clonerhoruz-ai/claude-pluginsAgentic workflow for cloning websites with pixel-perfect fidelity using specialized sub-agents. Use when the user wants to clone/copy/replicate a website, creat509skills.sh installs
4hkuds avatarcli-anything-wiremockhkuds/cli-anythingPython CLI harness for WireMock HTTP mock server administration503skills.sh installs
5bobmatnyc avataraxumbobmatnyc/claude-mpm-skillsAxum (Rust) web framework patterns for production APIs: routers/extractors, state, middleware, error handling, tracing, graceful shutdown, and testing500skills.sh installs
6hkuds avatarcli-anything-cloudanalyzerhkuds/cli-anythingCommand-line interface for CloudAnalyzer — Agent-friendly harness for CloudAnalyzer, a QA platform for mapping, localization, and perception outputs. Supports 2499skills.sh installs