Detect LDAP and XPath injection vulnerabilities in authentication controls.
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-ldap
Please help me install this Agent Skill. Skill: hunt-ldap Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/hunt-ldap Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-ldap
LDAP and XPath injection vulnerabilities enable authentication bypass and data exposure in directory-backed systems. This Skill helps security testers identify and map these weaknesses in LDAP/AD and XML-based backends.
Execute targeted LDAP and XPath injection tests against the target's authentication endpoints to observe login behavior and identify bypass opportunities.
High-intent search queries and answers about installing and using this skill.
You test LDAP injection by executing crafted payload patterns against the target's authentication endpoints to observe login behavior and identify bypass opportunities in directory-backed systems.
XPath injection is a flaw where crafted queries manipulate XML-based data stores to bypass access controls, exposing directory data by altering the logic of XPath queries that influence authentication.
Yes, you can enumerate Active Directory users, groups, and attributes through crafted LDAP queries. It provides enumeration workflows to map directory data during security assessments.
Yes, this approach applies to both AD and XML-based directory services. It identifies injection vulnerabilities in environments using LDAP or AD authentication and XPath queries for access control.
The limitation of testing authentication bypass with injection payloads is that it requires safe, auditable steps to avoid disrupting directory services. Testing is constrained to environments using LDAP or XPath for access control.
SkobynIdentify LDAP and XPath injection vulnerabilities in authentication systems.
uphiagoDetect Spring Boot-specific vulnerabilities including Actuator endpoints, SpEL injection, and Spring4Shell.
bpnrockstarDetect and exploit LDAP and XPath injection vulnerabilities in authentication mechanisms.
langbyyiIdentifies high-severity business logic vulnerabilities in web applications.
