---
id: 2326
title: "Out-of-band input channels"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/out-of-band-input-channels"
published_at: "2007-04-11T21:48:00Z"
tags: ["attack-surface", "sql-injection", "web-security", "portswigger", "input-validation", "out-of-band", "out-of-band-input", "webmail", "rss"]
phying_url: "https://phying.com/item/2326"
lang: en
---

# Out-of-band input channels

## Summary

Attacks need not arrive via HTTP: webmail processes SMTP data, monitoring UIs render sniffed packets, portals fetch RSS and URL imports — out-of-band channels are real attack surface, Stuttard warns.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2007-04-11T21:48:00Z
- **Original:** https://portswigger.net/blog/out-of-band-input-channels
- **Phying News:** https://phying.com/item/2326