QCSS Active Vulnerability Lab Discovery

All values are fake scanner fixtures.

SQL Injection

mysql sqli
mssql sqli
pgsql sqli
oracle sqli
sqlite sqli
time sqli

XSS

xss reflected
xss svg
xss polyglot

Command Injection

cmdi basic
cmdi ifs
cmdi quote
cmdi windows whoami
cmdi windows ipconfig
cmdi id

LFI

lfi
lfi null byte

Redirect / SSRF / NoSQLi / XXE / Header / RSC

open redirect
ssrf basic
ssrf decimal
ssrf aws
ssrf gcp
rsc
path disclosure
host header injection
user agent injection