Detect and exploit LDAP and XPath injection vulnerabilities in authentication systems.
npx skills add https://github.com/uphiago/recon-skills --skill hunt-ldap-uphiago
Please help me install this Agent Skill. Skill: hunt-ldap Source: https://github.com/uphiago/recon-skills/tree/main/redteam/hunt-ldap Command: npx skills add https://github.com/uphiago/recon-skills --skill hunt-ldap-uphiago
This skill addresses the challenge of identifying and exploiting LDAP and XPath injection vulnerabilities in directory authentication systems and XML-backed data stores, which are often under-tested but can lead to critical security breaches including authentication bypass, sensitive data exfiltration, and enterprise Active Directory compromise.
Use the hunt-ldap skill to test your organization's corporate SSO login endpoint for LDAP injection vulnerabilities and attempt a safe, controlled authentication bypass using balanced filter payloads to validate the finding.
High-intent search queries and answers about installing and using this skill.
XPath injection targets XML-backed data stores by injecting balanced expressions into authentication queries to bypass login validation. This skill provides payloads for XML-backed authentication bypass and node data dumping, enabling testers to extract hierarchical data structures from vulnerable XML query backends.
Blind LDAP exfiltration extracts sensitive attributes character-by-character using boolean-based inference techniques when query responses are not directly reflected. This skill provides validated payloads and false positive guards for blind attribute exfiltration, including non-AD userPassword hash extraction from directory authentication systems.
LDAP injection payloads apply to legacy Java and PHP applications that use directory backends for authentication and employee directory APIs. This skill targets corporate SSO portals and applications with LDAP or XML query backends, providing validated payloads tested against directory authentication systems commonly found in enterprise environments.
False positive guards for XPath and LDAP injection testing include payload validation checks and controlled authentication bypass verification using balanced filter expressions. This skill provides methodology to distinguish true vulnerabilities from error-based anomalies, ensuring penetration testers confirm actual authentication bypass rather than application errors.
EntroVyxDetect and exploit LDAP and XPath injection vulnerabilities in authentication interfaces.
blacklanternsecurityExploit Kerberos delegation misconfigurations in Active Directory for privilege escalation.
AcczdyAutomate web application penetration testing following the OWASP WSTG with Burp Suite.
infantesromeroadrianDetect and exploit SQL, NoSQL, OS Command, SSTI, XXE, and LDAP/XPath injection vulnerabilities.
