Avatar

Labs / LDAP Injector

  • Daily Challenge
  • Released 03 Sep 2025

🔐 Can you bypass enterprise authentication using directory manipulation?

A corporate employee portal relies on LDAP directory services for secure authentication, implementing enterprise-grade access controls. But when user input meets insufficient query sanitization, even the most trusted directory systems can become gateways to unauthorized access. 🎯 Time to test your directory injection skills against real-world authentication mechanisms!

1
Flags
1
Points
Daily Challenge
Free Access
Start Lab Environment

Launch your dedicated AWS machine to begin hacking

~1-2 min setup
AWS dedicated
Private instance
Industry standard
Daily Challenge

Solution Coming Soon

The solution for this lab will be available on 13 Sep 2025 00:00 UTC.

To keep the new labs challenging for everyone, solutions are only available 1 month after a lab has been released or when it gets archived, whichever comes first.