Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)
-
Updated
Nov 9, 2024 - Go
#
cldap
Here are 6 public repositories matching this topic...
Research on UDP/TCP amplification vectors, payloads and mitigations against their use in DDoS Attacks
-
Updated
Dec 14, 2024 - C
CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)
windows exploit poc windows-server vulnerability cve vulnerability-detection buffer-overflow cldap cve-2026-41089
-
Updated
Jun 2, 2026 - Python
CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong.
exploit active-directory poc rce windows-server pentesting domain-controller cve vulnerability-detection red-team buffer-overflow vulnerability-scanner security-research cldap netlogon zerologon stack-buffer-overflow cve-2026-41089 longlogon
-
Updated
Jun 4, 2026 - Python
A amplification/reflector scanner with CIDR support. Used for finding vulnerable protocols on your network commonly used by attackers to launch DrDoS attacks.
dns security ddos udp scanner ntp ddos-attacks payloads mitigations vulnerability-scanners amplification dns-amplification-attack cldap
-
Updated
Dec 31, 2022 - Python
Active Directory time discovery protocols for red teams. Stealthy extraction via Kerberos, SMB, NTLM, and CLDAP.
rust smb active-directory ntlm infosec kerberos pentesting pentest time-sync offensive-security red-team pentest-tool pentesting-tools cldap active-directory-exploitation
-
Updated
Jun 28, 2026 - Rust
Improve this page
Add a description, image, and links to the cldap topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cldap topic, visit your repo's landing page and select "manage topics."