What problem does it solve? Security testers need a disciplined, evidence-gated method to verify whether login forms, user search, group lookup, or directory sync interfaces properly escape LDAP filter metacharacters, without enumerating real directories or dumping user data. ## Core Features & Use Cases - Trigger Signal Detection: Recognizes ldap_query_input, directory_search, ldap_error, ad_login, group_lookup, and user_search_filter signals to route testing. - Baseline-Controlled Probing: Uses positive/negative control objects and single-variable probes on filter metacharacters, escaping, and parenthesis structure. - Strict Oracle and Stop Rules: Distinguishes real filter-boundary bypasses from false positives like 400/500 errors or ambiguous latency, and halts when real employee data or out-of-scope servers appear. - Use Case: During an authorized assessment of an AD login portal, use this Skill to test whether the authentication filter escapes special characters, confirming a bypass only when extra owned test objects are matched reproducibly. ## Quick Start Ask the agent to run the LDAP injection specialist against the authorized test directory login form using only the owned test accounts and baseline controls.
