Learn how to fuzz with nuclei

http:
...
  payloads:
    injection: # Variable name for payload
      - "'"
      ...
  fuzzing:
    - part: query       # One of query, path, header, cookie, body
      type: postfix     # Type of rule (prefix, postfix, replace, infix,replace-regex)
      mode: single      # mutation mode (single, multiple) (ex: replace all existing kv pairs at once or one by one)
      # replace-regex: # (optional) regex to be used in replace-regex type
      # keys-regex: # (optional) limit this rule to specific keys of the request part using regex
      # keys: # (optional) limit this rule to specific keys of request part
      # values: # (optional) limit this rule to specific values of the request part using regex

  fuzz:
    - "{{injection}}" # The payload to be injected