LDAP Injection
LDAP injection is when attackers inject LDAP filter metacharacters into a query string to bypass authentication or extract extra data.
Purpose
To understand injection caused by concatenating LDAP queries and its defenses; a common vulnerability in directory-service authentication.
Mechanism
The program builds the LDAP filter with "(uid=" + input + ")"; the attacker enters *)(uid=*) to construct an always-true filter that bypasses authentication. Defenses: parameterized LDAP queries, input escaping.
Use cases
- LDAP authentication security
- Directory service audit
- Query injection defense