LDAP:
Vulnerability Discovery
Guides on finding LDAP misconfigs via null bind, signing, and relay checks
2 guides
•
Created Dec 28, 2025
•
Updated Apr 5, 2026
LDAP vulnerability discovery targets misconfigurations that weaken directory security. Common findings include anonymous bind access allowing unauthenticated queries, null base DN searches exposing the directory structure, plaintext LDAP authentication without TLS, and overly permissive ACLs granting read access to sensitive attributes.
The subpages detail how to test for each of these issues and evaluate the data exposure they create.