mailing list archives
[NSE] ldap-search.nse - added ability to perform custom searches
From: Tom Sellers <nmap () fadedcode net>
Date: Sat, 29 Oct 2011 05:29:59 -0500
I have just committed the following changes:
ldap.lua - Added support for LDAP substring searches. These can now be performed alone or in conjunction with other
LDAP query types.
The change allows the programmatic equivalent of LDAP searches such as (operatingSystem=Windows*Server*).
ldap-search.nse - Added a new quick filter named 'custom'. This filter allows the user to specify, on the command
line, an attribute and corresponding
value to search the LDAP directory for. The use of the asterisk '*' as a wildcard is permitted in the value parameter.
This should provide
a bit more flexibility when searching LDAP via nmap. Unfortunately only one attribute/value pair is supported at this
nmap -p 389 --script ldap-search --script-args
Unfortunately I have only been able to test these changes with Windows. Any additional testing, particularly against
implementations would be greatly appreciated.
Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/
- [NSE] ldap-search.nse - added ability to perform custom searches Tom Sellers (Oct 29)