mcpField
S
security-fuzzing

security-fuzzing

github.com/eyadkellehSecurity394569 installsUpdated 20w ago
Repository

About security-fuzzing

security-fuzzing is a curated set of SecLists fuzzing payloads for authorized security testing, including several injection categories. It is intended for penetration testers, bug bounty work, CTFs, and education.

Key features

  1. 01SQL injection payloads
  2. 02Command injection payloads
  3. 03LDAP and NoSQL injection payloads
  4. 04Input validation characters

Use cases

  1. 01Authorized penetration testing
  2. 02In-scope bug bounty testing
  3. 03CTFs and security education
  4. 04Input validation on owned systems

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/eyadkelleh/awesome-skills-security --skill security-fuzzing

After installing, type/security-fuzzingin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/Fuzzing/
LDAP.Fuzzing.txt
special-chars.txt
references/Fuzzing/Databases/SQLi/
Generic-SQLi.txt
MySQL.fuzzdb.txt
NoSQL.txt
quick-SQLi.txt
sqli.auth.bypass.txt

Details

From the project README

SecLists Fuzzing (Curated)

Description

Essential fuzzing payloads: SQL injection, command injection, special characters. Curated essentials for vulnerability testing.

Source: SecLists/Fuzzing Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

  • SQL injection testing
  • Command injection testing
  • Input validation testing
  • LDAP injection
  • NoSQL injection

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • quick-SQLi.txt - Quick SQL injection tests
  • Generic-SQLi.txt - Generic SQL injection
  • sqli.auth.bypass.txt - Authentication bypass
  • MySQL.fuzzdb.txt - MySQL-specific payloads
  • NoSQL.txt - NoSQL injection payloads
  • command-injection-commix.txt - Command injection

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Fuzzing"

# List all available files
for root, dirs, files in os.walk(skill_path):
    for file in files:
        if file.endswith('.txt'):
            filepath = os.path.join(root, file)
            print(f"Found: {filepath}")
            
            # Read file content
            with open(filepath, 'r', errors='ignore') as f:
                content = f.read().splitlines()
                print(f"  Lines: {len(content)}")

Security & Ethics

Authorized Use Cases ✅
  • Authorized penetration testing with written permission
  • Bug bounty programs (within scope)
  • CTF competitions
  • Security research in controlled environments
  • Testing your own systems
  • Educational demonstrations
Prohibited Use Cases ❌
  • Unauthorized access attempts
  • Testing without permission
  • Malicious activities
  • Privacy violations
  • Any illegal activities

Complete SecLists Collection

This is a curated subset of SecLists. For the complete collection:

Generated by Skill Seeker | SecLists Fuzzing Collection License: MIT - Use responsibly with proper authorization

Comments

Markdown supported