Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
56 changes: 47 additions & 9 deletions javascript/enumeration/ldap/ldap-metadata.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -14,33 +14,71 @@ info:
tags: js,network,ldap

javascript:
- pre-condition: |
isPortOpen(Host,Port);
code: |
- code: |
const ldap = require('nuclei/ldap');
const cfg = new ldap.Config();
cfg.Upgrade = true;
const client = new ldap.Client(LDAPUrl, Port, cfg);
const client = new ldap.Client(Host, Port);
const metadata = client.CollectMetadata();
Export(metadata)
Export((metadata))

args:
Host: "{{Host}}"
LDAPUrl: "ldap://{{Host}}"
Host: "ldap://{{Host}}"
Port: 389

matchers:
- type: dsl
dsl:
- "len(BaseDn) != 0"
- "len(DnsHostName) != 0"
- "len(DefaultNamingContext) != 0"
- "len(DomainFunctionality) != 0"
- "len(ForestFunctionality) != 0"
- "len(DomainControllerFunctionality) != 0"
- "success == true"

extractors:
- type: json
internal: true
name: BaseDn
json:
- '.BaseDN'

- type: json
internal: true
name: DnsHostName
json:
- '.DnsHostName'

- type: json
internal: true
name: DefaultNamingContext
json:
- '.DefaultNamingContext'

- type: json
internal: true
name: DomainFunctionality
json:
- '.DomainFunctionality'

- type: json
internal: true
name: ForestFunctionality
json:
- '.ForestFunctionality'

- type: json
internal: true
name: DomainControllerFunctionality
json:
- '.DomainControllerFunctionality'

- type: json
json:
- '"BaseDN: " + .BaseDN'
- '"DnsHostName: " + .DnsHostName '
- '"DnsHostName: " + .DnsHostName'
- '"DefaultNamingContext: "+ .DefaultNamingContext'
- '"DomainFunctionality: "+ .DomainFunctionality'
- '"ForestFunctionality: " + .ForestFunctionality'
- '"DomainControllerFunctionality: "+ .DomainControllerFunctionality'
# digest: 4b0a00483046022100ffd4bc8b32f15db2d489bce66a8f815e9f72cc601692f1156a8fbfc05dd95490022100d1bcf2750ff39d6dbb0839d0dc40a7a26ec3b9649980008e958c044a2609674c:922c64590222798bb761d5b6d8e72950