LDAP Injection Techniques

• 作者: Antonio GUZMAN Jose Maria ALONSO Marta BELTRAN Rodolfo BORDON
• 来源期刊: 无线传感网络(英文)
• 学科: 医学
• 关键词: Web APPLICATIONS SECURITY CODE INJECTION TECHNIQUES LDAP
• 年，卷（期）: 2009,（4）
• 页码范围: 233-244
• 页数: 12页
• 分类号: R73

摘要

The increase in the number of databases accessed only by some applications has made code injection attacks an important threat to almost any current system. If one of these applications accepts inputs from a client and executes these inputs without first validating them, the attackers are free to execute their own queries and therefore, to extract, modify or delete the content of the database associated to the application. In this paper a deep analysis of the LDAP injection techniques is presented. Furthermore, a clear distinction between classic and blind injection techniques is made.