CVE-2021-29156

README

CVE-2021-29156 done right

This Proof of Concept is realized because the other PoC publicly available is broken ✨

Install

go install github.com/5amu/CVE-2021-29156@latest

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-29156
• https://portswigger.net/research/hidden-oauth-attack-vectors
• https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/13.0.0

Documentation

Overview

It is an LDAP Injection and a CVE. Please refer to the LICENSE to know that I'd like a shoutout but you basically can do whatever you please with this code. I guess nobody even care about this top comment lol.