Ravi Sir's Cyber Security Cards › Revision Cards
LDAP Enumeration
LDAP Enumeration LDAP (Lightweight Directory Access Protocol, ports 389/636) is a directory of users, groups and computers. Active Directory runs on it. An anonymous bind lets anyone read the directory with no login: usernames, emails and group membership. That list is perfect for phishing and passw
Read card text
What this card says
What it is
LDAP (Lightweight Directory Access Protocol, ports 389/636) is a directory of users, groups and computers.
Active Directory runs on it.
The risk
An anonymous bind lets anyone read the directory with no login: usernames, emails and group membership.
Why it matters for security
That list is perfect for phishing and password attacks.
Fix: disable anonymous bind, use LDAPS, and limit who can read. Test only in scope.
Learn more in the lesson: 37.4 LDAP Enumeration