skills.rest
ersinkoc
ersinkocCOMMUNITY
Explore all skills by this author →
Website𝕏@ersinkocGitHub

sc-ldap

Identify LDAP injection vulnerabilities in codebases and configurations.

56|5|Updated Apr 8, 2026
Search Tags:#security#authentication#vulnerability#code-review#escaping#ldap#ldap-injection
One-click install
npx skills add https://github.com/ersinkoc/security-check --skill sc-ldap
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sc-ldap
Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-ldap
Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-ldap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

LDAP injection vulnerabilities occur when user input is concatenated into LDAP search filters or DNs without proper escaping, potentially allowing authentication bypass and data disclosure.

Core Features & Use Cases

  • Detects insecure LDAP usage in search filters, DNs, and bind operations across common languages.
  • Provides safe-encoding and escaping guidance, and remediations to prevent injection.
  • Generates structured findings with remediation guidance for code reviews and secure deployments.

Quick Start

Scan a project for LDAP injection vulnerabilities and produce a prioritized report of findings.

Frequently Asked Questions about sc-ldap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect LDAP injection vulnerabilities in my codebase?▼

Identify LDAP injection by analyzing input handling in search filters, DNs, and bind operations across Java, Python, PHP, and C# codebases. The scan outputs structured findings detailing insecure concatenation and providing safe-encoding remediation guidance.

What is LDAP injection and how does it compromise authentication?▼

LDAP injection occurs when user input is concatenated into LDAP search filters or DNs without proper escaping. This vulnerability potentially allows authentication bypass and data disclosure by manipulating directory service queries.

Does LDAP injection detection work for Python and PHP applications?▼

LDAP injection detection is applicable to Java, Python, PHP, and C# web applications. It evaluates input handling, proper escaping or encoding, and safe API usage across these languages to identify insecure directory service queries.

What's the best way to secure LDAP bind operations against input manipulation?▼

Secure LDAP bind operations by applying proper escaping and safe encoding to user input before concatenation. Scanning evaluates bind operations for input handling vulnerabilities and generates prioritized remediation guidance to prevent authentication bypass.

Can I scan directory service configurations for insecure LDAP search filters?▼

Yes, you can scan directory service configurations and source code for insecure LDAP search filters. The analysis evaluates input handling and safe API usage, outputting a prioritized report of structured findings with safe-encoding remediation steps.

Related Skills

Explore More Software Engineering Skills→
florianbuetowflorianbuetow
12

tampering

Analyze source code for injection vulnerabilities and unauthorized data modifications.

Community
Advanced
DevelopersCoffeeDevelopersCoffee
3

cwe-90-ldap-injection

Remediate CWE-90 LDAP injection vulnerabilities in Java code with parameterized filters.

Official
Intermediate
macaughmacaugh
5

Static Vulnerability Analysis

Detects injection, memory safety and authorization flaws in multiple languages.

Community
Advanced
ToanPV90ToanPV90

sast-scanning

Detects source code vulnerabilities via static analysis with JSON/SARIF outputs.

Community
Advanced