Skip to content
Security
Skill

/security-usernames

Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.

From plugin
awesome-skills-security
3937 skills

Claude Code

$ npx -y skills add Eyadkelleh/awesome-skills-security --skill security-usernames --agent claude-code

SKILL.md

security-usernames.SKILL.md
name: security-usernames
description: "Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing."

SecLists Usernames (Curated)

Description

Top username lists for enumeration: common usernames, default credentials, names. Curated essentials for authorized testing.

**Source:** [SecLists/Usernames](https://github.com/danielmiessler/SecLists/tree/master/Usernames) **Repository:** https://github.com/danielmiessler/SecLists **License:** MIT

When to Use This Skill

Use this skill when you need:

  • Username enumeration (authorized)
  • Default credential testing
  • User discovery
  • Account validation

**⚠️ IMPORTANT:** Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • `top-usernames-shortlist.txt - Most common usernames`
  • `cirt-default-usernames.txt - Default system usernames`
  • `Names/names.txt - Common first/last names`

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Usernames"

# List all available files
for root, dirs, files in os.walk(skill_path):
    for file in files:
        if file.endswith('.txt'):
            filepath = os.path.join(root, file)
            print(f"Found: {filepath}")
            
            # Read file content
            with open(filepath, 'r', errors='ignore') as f:
                content = f.read().splitlines()
                print(f"  Lines: {len(content)}")

Security & Ethics

Authorized Use Cases ✅

  • Authorized penetration testing with written permission
  • Bug bounty programs (within scope)
  • CTF competitions
  • Security research in controlled environments
  • Testing your own systems
  • Educational demonstrations

Prohibited Use Cases ❌

  • Unauthorized access attempts
  • Testing without permission
  • Malicious activities
  • Privacy violations
  • Any illegal activities

Complete SecLists Collection

This is a curated subset of SecLists. For the complete collection:

  • **Full repository:** https://github.com/danielmiessler/SecLists
  • **Size:** 4.5 GB with 6,000+ files
  • **All categories:** Passwords, Usernames, Discovery, Fuzzing, Payloads, Web-Shells, Pattern-Matching, AI, Miscellaneous

---

**Generated by Skill Seeker** | SecLists Usernames Collection **License:** MIT - Use responsibly with proper authorization

Read more
@eyadkelleh
Ships withawesome-skills-security

A curated collection of security testing resources packaged as agent skills, available on skills.sh Repository: Eyadkelleh/awesome-skills-security · skills.sh: Eyadkelleh/awesome-skills-security

Stars on GitHub

Momentum

stars in total
393
Star history of Eyadkelleh/awesome-skills-security on GitHub, a chart by star-history.com

Other skills on awesome-skills-security.

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw11d23k
@nvidia@nvidiaInstall Skill

Questions about security-usernames.

Which coding agents can use security-usernames?
security-usernames installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.