Re: LDAP Pentest

From: Walter Williams (wbjw_at_comcast.net)
Date: 09/23/04

  • Next message: Chuck Fullerton: "Wireless Scanning"
    Date: Wed, 22 Sep 2004 23:50:42 -0400
    To: Anders Thulin <Anders.Thulin@tietoenator.com>, pen-test@securityfocus.com
    
    

    LDAP Browser from Softterra is only free for a read only version. If
    you want a free GUI interface, use jxplorer. Otherwise Sun has some
    really nice tools in their SunOne Resource kit. I recommend the 5.1
    version which has a nice TCL ldap shell called ilash (a hold out from
    their innosoft days)

    Walt

    Anders Thulin wrote:
    > andre lista wrote:
    >
    >> I would like to know if there is any tools or other related material
    >> that could
    >> help me on one LDAP directory pentest.
    >
    >
    > A useful tool for LDAP in general is the free LDAP browser from
    > Softerra (www.ldapbrowser.com).
    >
    > As for finding tools, how about www.securityfocus.com/swsearch and
    > then try 'ldap' in the 'tools' category? I don't find bf_ldap there,
    > but THC-Hydra certainly is.
    >
    > For vulnerabilities and possibly exploits, try the 'vulns' category.
    >

    ------------------------------------------------------------------------------
    Ethical Hacking at the InfoSec Institute. All of our class sizes are
    guaranteed to be 12 students or less to facilitate one-on-one interaction
    with one of our expert instructors. Check out our Advanced Hacking course,
    learn to write exploits and attack security infrastructure. Attend a course
    taught by an expert instructor with years of in-the-field pen testing
    experience in our state of the art hacking lab. Master the skills of an
    Ethical Hacker to better assess the security of your organization.

    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    -------------------------------------------------------------------------------


  • Next message: Chuck Fullerton: "Wireless Scanning"

    Relevant Pages

    • RE: LDAP Pentest
      ... Subject: LDAP Pentest ... Ethical Hacking at the InfoSec Institute. ... learn to write exploits and attack security infrastructure. ... experience in our state of the art hacking lab. ...
      (Pen-Test)
    • Re: LDAP Pentest
      ... A useful tool for LDAP in general is the free LDAP browser from ... Ethical Hacking at the InfoSec Institute. ... learn to write exploits and attack security infrastructure. ...
      (Pen-Test)
    • Re: LDAP Pentest
      ... LDAP Browser from Softterra is only free for a read only version. ... Ethical Hacking at the InfoSec Institute. ... learn to write exploits and attack security infrastructure. ...
      (Pen-Test)
    • Re: get user attributes php/ldap/win2k active directory
      ... I've been getting entries from an Active Directory server through LDAP ... If you need an LDAP Browser, ... Redmond Militante wrote: ...
      (php.general)
    • ldap (oid) name resolution security !
      ... We will switch our name resolution service from ONAMES to LDAP (oid) ... With the ldapsearch utility (or with any ldap browser), ...
      (comp.databases.oracle.server)