Out-of-band channels for entry points in web application hacking

Question

I am trying to execute a sql injection and cross-site-scripting on a web application from out-of-band channels. What are the ways/channels that I can use to send user input data?

Answer 1

The out-of-band channels for entry depends on the services that the web application uses. Here are some common out-of-band channels you should look for to inject malicious data:

• Application that processes contents in the emails
• Application that receives results from another web application or https response
• Application that use or provides API interface

To know more take this CEH (v12) - Certified Ethical Hacking course today.