[OWASP-wiki-editors] "Out-of-band Resource Load"

Andrew Smith andrew.smith at owasp.org
Fri Jun 19 13:29:18 UTC 2015


List,

I am catching up on the recent burp suite release that introduces the
concept of "super blind" injection vulnerabilities. They mentions a
vulnerability class that they call "Out-of-band Resource Load" that sounds
very interesting to me, as it is like RFI/Path traversal, but is more
generic allowing for the inclusion of non-standard protocols such as SMB,
DNS, etc. What do you guys think about me adding a wiki article on this
type of bug?

http://blog.portswigger.net/2015/04/introducing-burp-collaborator.html

Thanks,
Andrew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-wiki-editors/attachments/20150619/3b29fbb5/attachment.html>


More information about the OWASP-wiki-editors mailing list