Bug Bounty, Cybersecurity, Technology, Penetration Testing, Bug Bounty Tips.
check if a user has admin privileges: (&(objectClass=person)(uid=<username>)(isAdmin=TRUE)) An attacker can inject the following payload into the username field to escalate their privileges: *)(isAdmin=*)( By injecting this payload, the LDAP filter becomes: