hunt-ldap

Detect LDAP and XPath injection vulnerabilities in authentication controls.

Updated Jun 5, 2026

Search Tags:#authorization #authentication #injection #directory #xpath #ldap #ad

Ready to run

npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-ldap

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hunt-ldap
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/hunt-ldap
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-ldap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

LDAP and XPath injection vulnerabilities enable authentication bypass and data exposure in directory-backed systems. This Skill helps security testers identify and map these weaknesses in LDAP/AD and XML-based backends.

Core Features & Use Cases

Detect LDAP and XPath injection flaws that bypass authentication and reveal directory data.
Enumerate Active Directory users, groups, and attributes through crafted queries.
Map exploitation chains and plan targeted red-team or pentest engagements against directory services.

Quick Start

Execute targeted LDAP and XPath injection tests against the target's authentication endpoints to observe login behavior and identify bypass opportunities.

Frequently Asked Questions about hunt-ldap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I test for LDAP injection to bypass authentication controls?▼

You test LDAP injection by executing crafted payload patterns against the target's authentication endpoints to observe login behavior and identify bypass opportunities in directory-backed systems.

What is XPath injection and how does it expose XML data stores?▼

XPath injection is a flaw where crafted queries manipulate XML-based data stores to bypass access controls, exposing directory data by altering the logic of XPath queries that influence authentication.

Can I enumerate Active Directory users and groups through LDAP injection?▼

Yes, you can enumerate Active Directory users, groups, and attributes through crafted LDAP queries. It provides enumeration workflows to map directory data during security assessments.

Does this approach work for both AD and XML-based directory services?▼

Yes, this approach applies to both AD and XML-based directory services. It identifies injection vulnerabilities in environments using LDAP or AD authentication and XPath queries for access control.

What are the limitations of testing authentication bypass with injection payloads?▼

The limitation of testing authentication bypass with injection payloads is that it requires safe, auditable steps to avoid disrupting directory services. Testing is constrained to environments using LDAP or XPath for access control.