Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-inpv-06
Testing for LDAP Injection
Passed 20 of 22 test cases with the skill, and 19 of 22 without it.
1 fixed19 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
When checking web application error messages for directory integration flaws, what Java JNDI package prefix or exception name indicates filter syntax errors?
| Checked | Without skill | With skill |
|---|---|---|
| The response identifies javax.naming.NamingException. | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-INPV-06
Testing for LDAP Injection
LDAP Injection occurs when user input is incorrectly filtered or not sanitized before being included in LDAP queries. Attackers can modify LDAP queries to bypass authentication, extract sensitive directory information, or modify directory data.
#!/bin/bash
TARGET="https://target.com/login"
# Basic LDAP injection payloads
echo "[*] Testing for LDAP injection..."
# Test with special characters
curl -s -X POST "$TARGET" -d "username=*&password=*"
test cases passed, vs 19 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.