# security-usernames

Curated username wordlists from SecLists for user discovery, enumeration, and default credential testing in authorized security assessments.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 537 installs · ★ 393
- Author: Eyadkelleh
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Eyadkelleh/awesome-skills-security/tree/HEAD/skills/security-usernames/SKILL.md
- Updated: 2026-06-08
- HTML: https://affpapa.org/en/nevibecode/skills/security-usernames

## What it does

This skill installs curated username wordlists from the SecLists repository into your agent environment. It supplies files such as `top-usernames-shortlist.txt` for common handles, `cirt-default-usernames.txt` for factory defaults, and `Names/names.txt` for common personal names.

Targeting systems with these lists requires explicit written permission, defined bug bounty scope, or dedicated CTF infrastructure. The dictionaries reside in `references/Usernames`, ready for consumption by custom scripts during authentication testing.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/security-usernames/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/security-usernames/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/security-usernames/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/security-usernames/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install Eyadkelleh/awesome-skills-security security-usernames
```

2. **Manually: put the files in place**
- File: `.github/skills/security-usernames/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/Eyadkelleh/awesome-skills-security --path skills/security-usernames
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/security-usernames/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-usernames -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/Eyadkelleh/awesome-skills-security/tree/HEAD/skills/security-usernames/SKILL.md

## When to use it
- enumerate user accounts during authorized penetration tests
- identify active default system credentials on targeted assets
- prepare focused username wordlists for CTF challenges
- audit account validation behavior on test targets

## Example prompts
- Load `top-usernames-shortlist.txt` from `references/Usernames` to inspect common handles
- Read `cirt-default-usernames.txt` to test known default accounts
- Inspect `references/Usernames` and list all available wordlist files

## Similar
- [testing-jwt-token-security](https://affpapa.org/en/nevibecode/skills/testing-jwt-token-security.md) — skill · 536 installs
- [analyzing-ios-app-security-with-objection](https://affpapa.org/en/nevibecode/skills/analyzing-ios-app-security-with-objection.md) — skill · 436 installs
- [security-auditor](https://affpapa.org/en/nevibecode/skills/sickn33-security-auditor.md) — skill · 1400 installs
- [cargo-fuzz](https://affpapa.org/en/nevibecode/skills/cargo-fuzz.md) — skill · 5400 installs
- [burpsuite-project-parser](https://affpapa.org/en/nevibecode/skills/burpsuite-project-parser.md) — skill · 5100 installs
- [api-auth-and-jwt-abuse](https://affpapa.org/en/nevibecode/skills/api-auth-and-jwt-abuse.md) — skill · 3800 installs

From the same set: [eyadkelleh/awesome-skills-security](https://affpapa.org/en/nevibecode/by/eyadkelleh/awesome-skills-security.md) — 6 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md