Skip to content
SelfSec
Join the launch listLaunch list
SelfSec
Vulnerability field guide

LDAP Injection

LDAP injection is SQL injection's directory-service cousin. Learn how unescaped assertion values rewrite a search filter, why password checks belong in a bind, and how RFC 4515 encoding closes the boundary.

1 article 6 min total Overview to advanced techniques

Start with the overview

LDAP Injection6 min read

LDAP Injection: When User Input Rewrites a Directory Search

LDAP injection is SQL injection's directory-service cousin. Learn how unescaped assertion values rewrite a search filter, why password checks belong in a bind, and how RFC 4515 encoding closes the boundary.

Read the overview