ldap

The ldap identity: Lightweight Directory Access Protocol. Every field and what is required.

ldap is the Lightweight Directory Access Protocol (RFC 4511). The target is host:port (default 389). The step sends and receives raw bytes as hex, and the session persists across steps, so a solution can stage an exchange and continue it.

Fields

ldap uses the byte-session fields from tcp:

field	required	what it does
`send`	yes	the bytes to send, as hex or `hex "text"`; empty when a step only reads
`recv`		how many bytes to read at most
`recv_until`		stop reading once this hex marker appears
`timeout`		how long to wait, in seconds
`close`		end the session after this step
`capture`		pull a value out of the received hex for later steps

Example

ldap bind
  meaning: send a bind request and look for the response
  send: 30260d02010263051a0100...
  recv: 4096
  assert: contains "610c"

Write attacks down. Verify them.

Download the binary, point it at a target you own, and get a verified result. The corpus is open and the format is plain text.

Get started Read the docs