LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale

on YouTube ↗30m

" summary

Presents LanDscAPe, a custom Internet-scale scanner that probes deployed LDAP servers to find security-relevant misconfigurations and weak TLS setups. Reports concrete findings: over 10k exposed servers, ~4.9k containing personal data and ~1.8k leaking passwords, plus instances of deprecated vulnerable software, and outlines a notification campaign to remediate these issues.

AI-written summary · about

" related talks

• 48mA Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream LandAlvaro Munoz, Oleksandr Mirosh · Black Hat USA 2016
• 19mThe Blind Spots of IT Experts on Security & What Companies Must Do Against ItJuergen Rink · hub.berlin 2022
• 26mInternet Scanning - Current State and Lessons LearnedMark Schloesser · Black Hat USA 2014
• 32mPicking the Low-Hanging Fruit – Easy Pentest WinsMarcus Bointon · JSConf Budapest 2024
• 59mSecuring the Digital Landscape: A Deep Dive into OWASP Top 10 for Applications, APIs, and LLMsRohit · Great International Developer Summit 2025
• 54mStay Out of the Kitchen: A DLP Security Bake-OffKelly Lum, Zach Lanier · Black Hat USA 2014
• 39mHard to Port! - A Snapshot of the Vulnerability Landscape in 2015Rahim Jina · OWASP AppSec California 2016
• 35mLCDPwn: Breaking Enterprise-Things with Layer 2 Discovery Protocol Vulnerabilities AgainQian Chen · Black Hat Europe 2022