RARafid Ahmedinrafidths.hashnode.dev·Oct 2 · 2 min readHack The Box (HTB) - Hercules writeupHercules is an Insane-level Windows Active Directory lab machine focused on advanced AD abuse, Active Directory Certificate Services (AD CS) exploitation, and Kerberos delegation attacks. Rather than 00
HHanineunhanlee.hashnode.dev·Aug 29, 2023 · 1 min readLDAP Injection CheatsheetBasic LDAP Search Query LDAP (Lightweight Directory Access Protocol) is commonly used to retrieve specific information from directory services (e.g., Active Directory). The following is an example of an LDAP query for basic searches: (&(attribute1=va...00
HHanineunhanlee.hashnode.dev·Aug 29, 2023 · 2 min readWhat is LDAP InjectionDefinition LDAP (Lightweight Directory Access Protocol) injection is a security vulnerability that occurs when user-input data is used in LDAP queries without proper validation or sanitization. This can lead to unauthorized access or manipulation of ...00
