ldap-injection

Notes from TryHackMe's Web Application Pentesting path. Goes beyond OWASP Top 10 basics into JWT and OAuth attacks, NoSQL/XXE/SSTI/LDAP injection, SSRF, insecure deserialization, and HTTP request smuggling across HTTP/1.1, HTTP/2, and WebSockets, with full kill chain writeups for each module's challenge room.

jwt nosql deserialization penetration-testing web-security web-sockets ssrf owasp-top-10 xxe ldap-injection http-request-smuggling

Updated Jun 19, 2026

robpco / docker-ldap-server

Star

Dockerized OpenLDAP server with quick setup examples

docker-container docker-image ldap-server ldap-schema ldap-docker ldap-injection ldap-demo

Updated Dec 17, 2023
Shell

Jaycelation / LDAP_Demo

Star

Demo BTCN MMHCS

docker ldap-injection ssti privelage-escalation

Updated May 27, 2025
HTML

imxyanua / XyaInjex

Star

Injection context and breakout analyzer: understand not just whether a payload works, but how it escapes its context. Covers shell, SQL, template (SSTI), XPath, LDAP, NoSQL, prompt, and agent/MCP injection, with a CLI, HTTP API, and web UI.

security injection sql-injection pentesting appsec security-tools command-injection xpath-injection nosql-injection ldap-injection ssti prompt-injection

Updated Jul 8, 2026
Python

Improve this page

Add a description, image, and links to the ldap-injection topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ldap-injection topic, visit your repo's landing page and select "manage topics."

Learn more