Description
LDAP (轻型目录访问协议)是一种软件协议，使任何人都能够在网络中定位组织、个人和其他资源，例如文件和设备，无论是在公共互联网上还是在企业内部网上。LDAP 是目录访问协议(DAP)的“轻量级”(代码量较小)版本。
如果攻击者有一个有效凭据登录LDAP，则可以导出全部的信息，导致数据泄露。
LDAP服务-弱口令漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://comate.baidu.com/zh/page/wd93peyik8h
https://bbs.sangfor.com.cn/forum.php?mod=viewthread&tid=98529
https://www.cnblogs.com/xiaozi/p/13296754.html
https://3gstudent.github.io/%E6%B8%97%E9%80%8F%E5%9F%BA%E7%A1%80-%E9%80%9A%E8%BF%87LDAP%E5%8D%8F%E8%AE%AE%E6%9A%B4%E5%8A%9B%E7%A0%B4%E8%A7%A3%E5%9F%9F%E7%94%A8%E6%88%B7%E7%9A%84%E5%8F%A3%E4%BB%A4
https://www.venustech.com.cn/new_type/aqtg/20250104/28265.html
https://www.secrss.com/articles/74315
https://xygeni.io/zh-CN/sscs-glossary/what-is-ldap-injection/
https://blog.csdn.net/2401_88751384/article/details/143861425
https://www.trendmicro.com/zh_tw/research/25/a/information-stealer-masquerades-as-ldapnightmare-poc-exploit.html
https://learn.microsoft.com/zh-cn/dotnet/fundamentals/code-analysis/quality-rules/ca3005
https://www.ithome.com.tw/news/166868
https://www.anquanke.com/post/id/303636
https://www.51cto.com/article/805733.html
https://zhuanlan.zhihu.com/p/421870679
https://nic.seu.edu.cn/info/1047/1197.htm
http://k8gege.org/Ladon/LdapScan.html
https://saucer-man.com/information_security/437.html
https://nic.cczu.edu.cn/2025/0213/c1305a383936/page.htm
https://casdoor.github.io/zh/docs/ldap/ldapserver/
https://ninjia.gitbook.io/secskill/web/ldap
https://www.semperis.com/blog/how-to-defend-against-ldap-injection-attacks/
https://www.sentinelone.com/cybersecurity-101/identity-security/ldap-injection/
https://www.imperva.com/learn/application-security/ldap-injection/
https://news.ycombinator.com/item?id=12854099
https://community.spiceworks.com/t/finding-weak-passwords-in-ad/941493
https://michaelwaterman.nl/2025/04/10/detecting-weak-passwords-in-active-directory/
https://security.paloaltonetworks.com/CVE-2012-6596
https://github.com/nilsteampassnet/TeamPass/issues/308
https://www.usenix.org/system/files/usenixsecurity24-kaspereit.pdf