Testing for LDAP Injection (OTG-INPVAL-006)

From OWASP
Revision as of 04:00, 7 November 2006 by Wisec (talk | contribs) (Brief Summary)

Jump to: navigation, search

OWASP Testing Guide v2 Table of Contents

Brief Summary

LDAP is an acronym for Lightweight Directory Access Protocol. It is a way to store informations about users, hosts and many other objects.


LDAP Injection is a server side attack, which could allow sensitive information disclosure to be disclosed, modified or inserted about users and hosts represented in an LDAP structure.
It is done by manipulating input parameters afterwards passed to internal search,add and modify functions.

Description of the Issue

...

Black Box testing and example

Testing for Topic X vulnerabilities:
...
Result Expected:
...

Gray Box testing and example

Testing for Topic X vulnerabilities:
...
Result Expected:
...

References

Whitepapers
...
Tools
...


OWASP Testing Guide v2

Here is the OWASP Testing Guide v2 Table of Contents OWASP Testing Guide v2 Table of Contents

This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.