Out-of-band input channels
portswigger.net | blog | #attack-surface | #sql-injection | #web-security | #portswigger | #input-validation | #out-of-band | #out-of-band-input | #webmail | #rss
Summary
Attacks need not arrive via HTTP: webmail processes SMTP data, monitoring UIs render sniffed packets, portals fetch RSS and URL imports — out-of-band channels are real attack surface, Stuttard warns.
- Published
- Collected
--- id: 2326 title: "Out-of-band input channels" source_domain: portswigger.net source_url: "https://portswigger.net/blog/out-of-band-input-channels" published_at: "2007-04-11T21:48:00Z" tags: ["attack-surface", "sql-injection", "web-security", "portswigger", "input-validation", "out-of-band", "out-of-band-input", "webmail", "rss"] phying_url: "https://phying.com/item/2326" lang: en --- # Out-of-band input channels ## Summary Attacks need not arrive via HTTP: webmail processes SMTP data, monitoring UIs render sniffed packets, portals fetch RSS and URL imports — out-of-band channels are real attack surface, Stuttard warns. ## Intelligence Metadata - **Sources:** portswigger.net - **Published:** 2007-04-11T21:48:00Z - **Original:** https://portswigger.net/blog/out-of-band-input-channels - **Phying News:** https://phying.com/item/2326