About LDAP injection


The concept of LDAP injection is similar to SQL injection, except that the target is Active Directory or any LDAP server.  The idea is to inject untrusted data into a LDAP query by malicious users.

 

Here comes a paper to explain that.

http://www.spidynamics.com/support/whitepapers/LDAPinjection.pdf

 

Comments (1)