Trace user-controlled inputs to LDAP execution points in PHP code.
npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-ldap-audit
Please help me install this Agent Skill. Skill: php-ldap-audit Source: https://github.com/0xShe/PHP-Code-Audit-Skill/tree/main/php-ldap-audit Command: npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-ldap-audit
PHP web applications often build LDAP queries by concatenating user input into filters or DNs, which can lead to LDAP injection vulnerabilities that bypass authentication or disclose data. This Skill provides tooling and methodology to identify, classify and remediate LDAP-related injection risks in PHP source code.
Audit a PHP codebase to locate LDAP query constructions and generate an evidence-based remediation plan.
High-intent search queries and answers about installing and using this skill.
Detect LDAP injection vulnerabilities in PHP by tracing user-controlled inputs into filter and DN construction, mapping execution paths to ldap_search and ldap_read bindings to produce evidence-based remediation guidance.
Static analysis traces user input to LDAP execution points by following data flow from request variables into filter and DN strings, identifying where unsanitized data reaches ldap_search or ldap_read functions during the security audit.
Yes, you can audit an entire PHP project for LDAP query construction risks by applying the analysis across the codebase to catalog all instances where user input influences LDAP bindings and generate a comprehensive remediation plan.
Generate PoC-ready reports for LDAP injection findings by mapping identified inputs to LDAP execution points, filtering outputs, and producing evidence-collection templates that support secure fixes and proof of concept validation.
Threat modeling supports remediating PHP LDAP injection risks by providing the methodology to classify injection paths and prioritize fixes, while the audit itself enforces evidence-contract requirements to map inputs to execution points for secure remediation.
manuelbrandner85Parse source code into directed graphs for security-focused static analysis.
ArianHobson333Automate creation and verification of minimal patch diffs for validated vulnerabilities.
iiammaeMap SARIF and weAudit findings onto Trailmark code graphs for security audits.
fatihkanDetect LDAP injection vulnerabilities from unsafely concatenated user inputs.
