LDAP

Port 389 and 636

LDAP InjectionTryHackMe

LDAP is like a phonebook for network resources.

It stands for Lightweight Directory Access Protocol and is used to maintain and access distributed directory information services over the Internet Protocol.

With LDAP, organizations can manage users, groups and other directory information centrally, and is often used for authentication and authorization purposes in web applications.

LDAP is popularly used by Windows Active Directory.

LDIF Format

LDAP entries can be represented using the LDAP Data Interchange Format (LDIF), a standard plain text data format for representing LDAP directory entries and update operations. LDIF imports and exports directory contents and describes directory modifications such as adding, modifying, or deleting entries.

Structure of LDAP

It uses a hierarchial structure as shown in the figure below.

LDIF Format

LDAP entries can be represented using the LDAP Data Interchange Format (LDIF), a standard plain text data format for representing LDAP directory entries and update

Taken from TryHackMe

The structure might remind one of Active Directory. Here, top of the tree forms the Top Level Domain (TLD) and below that are subdomains or organizational units.

• Distinguished Names (DNs): Serve as unique identifiers for each entry in the directory, specifying the path from the top of the LDAP tree to the entry, for example, cn=John Doe,ou=people,dc=example,dc=com.

• Relative Distinguished Names (RDNs): Represent individual levels within the directory hierarchy, such as cn=John Doe, where cn stands for Common Name.

• Attributes: Define the properties of directory entries, like mail=[e-mail] for an email address.