Reflecting Techniques - PoCs and Polygloths CheatSheet
The goal of these PoCs and Polygloths is to give the tester a fast summary of vulnerabilities he may exploit if his input is somehow being reflected in the response.
This cheatsheet doesn't propose a comprehensive list of tests for each vulnerability, juts some basic ones. If you are looking for more comprehensive tests, access each vulnerability proposed.
You won't find Content-Type dependant injections like XXE, as usually you will try those yourself if you find a request sending xml data. You won't also find database injections here as even if some content might be reflected it depends heavily on the backend DB technology and structure.
Polygloths list
Basic Tests
Polygloths
Basic Tests
Polygloths
Basic Tests
Dangling Markup
Basic Tests
Basic Tests
Basic Tests
Basic Tests
Basic Tests
Polygloths
The same tests used for Open Redirect can be used here.