Tagged Questions
2
votes
2answers
153 views
Vuln Web App which includes LDAP Injection?
I want to check several techniques for LDAP injection, but I cannot find a vulnerable application (like Webgoat, Hacme etc.) which uses LDAP injection.
Do you know of any vulnerable web application ...
0
votes
1answer
530 views
How do I sanitize LDAP input and prevent injection attacks? What LDAP injection scenarios are possible?
In the following C# example I'm querying AD's configuration container for Exchange overrides. If the domain name in unsanitised the end user could get LDAP to read a different object then intended.
...
