Bug Bounty, Cybersecurity, Technology, Penetration Testing, Bug Bounty Tips.
filter to search for a user with a specified email address: (&(objectClass=person)(mail=<email>)) An attacker can inject the following payload into the email field to retrieve data for all users: *)(objectClass=person)| By injecting this payload, the LDAP filter becomes: