Detect LDAP injection vulnerabilities from unsafely concatenated user inputs.
npx skills add https://github.com/fatihkan/badi --skill sc-ldap-fatihkan
Please help me install this Agent Skill. Skill: sc-ldap Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-ldap Command: npx skills add https://github.com/fatihkan/badi --skill sc-ldap-fatihkan
LDAP injection occurs when user input is concatenated into LDAP search filters or Distinguished Name strings without proper escaping, enabling authentication bypass and data exposure.
Run a quick scan of your codebase to identify LDAP input concatenation in filters or DNs.
High-intent search queries and answers about installing and using this skill.
LDAP injection vulnerabilities are detected by scanning for unsafely concatenated user inputs into LDAP search filters and Distinguished Name strings. This identifies authentication bypass risks in directory lookups across multiple languages.
LDAP input escaping analysis supports Java, Python, PHP, C#, and Node.js. It scans common patterns in authentication flows and directory lookups across these languages to identify unsafe input concatenation.
Fix LDAP injection risks by applying recommended LDAP escape utilities and transitioning to parameterized search APIs. The scan provides actionable remediation guidance to replace unsafe input concatenation in filters and DNs.
You can scan an application login module to identify LDAP injection points by detecting unsafely concatenated user inputs in search filters and DN strings. It then recommends safe escaping practices to mitigate risk.
User input concatenation causes LDAP security vulnerabilities because unescaped data directly modifies search filters or Distinguished Names, enabling authentication bypass and unauthorized data exposure in directory lookups.
This LDAP vulnerability scanner works with Node.js directory lookups, alongside Java, Python, PHP, and C#. It detects unsafe input concatenation patterns and recommends appropriate escape utilities for each environment.
chenchunrunAudit source code for security vulnerabilities and generate risk-rated CWE reports.
harperaaDetect SQL injection and command injection vulnerabilities in AI-generated Python code.
bpnrockstarDetect and exploit LDAP and XPath injection vulnerabilities in authentication mechanisms.
supermalangMeasure application performance against explicit budgets with runtime tools.
