Lifedork » LDAP http://www.lifedork.net still GeeX? still SuX! Sat, 04 Sep 2010 22:23:12 +0000 http://wordpress.org/?v=2.9.1 en hourly 1 http://www.lifedork.net http://www.lifedork.com/favicon.ico Lifedork backtrack ldap http://www.lifedork.net/backtrack-ldap.html http://www.lifedork.net/backtrack-ldap.html#comments Mon, 16 Aug 2010 23:22:54 +0000 admin http://www.lifedork.net/backtrack-ldap.html A lot of people coming through search engine to search backtrack ldap , in this post i will show you some blog post that talk about backtrack , backtrack , ldap , backtrack ldap at most. So if you enjoy backtrack ldap , just read this post.
Go here:
backtrack ldap

]]> http://www.lifedork.net/backtrack-ldap.html/feed 0 ldapuserenum – Active Directory LDAP Server Information Disclosure Vulnerability http://www.lifedork.net/ldapuserenum-active-directory-ldap-server-information-disclosure-vulnerability.html http://www.lifedork.net/ldapuserenum-active-directory-ldap-server-information-disclosure-vulnerability.html#comments Fri, 14 Nov 2008 14:33:19 +0000 admin http://www.lifedork.com/?p=426
server tools

Image by somefool (MatthewM) via Flickr

Information disclosure vulnerability could be exist in the microsoft ldap server responds when it’s binding to the ldap server. When an invalid password is provided, the server will respond with result code 49 (invalidCredentials) and an error message. A different error message is returned if an invalid username is provided. Here’s the usage of the ldapuserenum : (taken from http://labs.portcullis.co.uk/application/ldapuserenum/)

Usage

$ python ldapuserenum-0.1.py -h
Usage: ldapuserenum-0.1.py [-i] -t

Options:
–version show program’s version number and exit
-h, –help show this help message and exit
-d show description and exit
-t TARGET target IP or hostname
-i, –info show LDAP information gathering results

Example

$ python ldapuserenum-0.1.py -t 192.168.123.32

Going to enumerate users taking ‘./users.txt’ file as input

[*] Enumerated users:
[*] User: testuser
[*] LDAP error code: 52e
[*] LDAP message: invalid credentials
[*] User: administrator
[*] LDAP error code: 52e
[*] LDAP message: invalid credentials
[*] User: guest
[*] LDAP error code: 52e
[*] LDAP message: invalid credentials
[*] User: aspnet
[*] LDAP error code: 52e
[*] LDAP message: invalid credentials

Related articles :

Please explore this blog to obtain more informations about sql inject tutorial , cara ngehack fs , webgoat tutorials , friendster password cracker , and so on


]]> http://www.lifedork.net/ldapuserenum-active-directory-ldap-server-information-disclosure-vulnerability.html/feed 0