Skip to content
Out-of-band input channels
portswigger.net | blog | #attack-surface | #sql-injection | #web-security | #portswigger | #input-validation | #out-of-band | #out-of-band-input | #webmail | #rss
Summary
Attacks need not arrive via HTTP: webmail processes SMTP data, monitoring UIs render sniffed packets, portals fetch RSS and URL imports — out-of-band channels are real attack surface, Stuttard warns.
- Published
- Collected