LDAP Peach Pit User Guide. Peach Fuzzer, LLC. v3.7.50

Size: px

Start display at page:

Download "LDAP Peach Pit User Guide. Peach Fuzzer, LLC. v3.7.50"

Derek Robertson
6 years ago
Views:

1 LDAP Peach Pit User Guide Peach Fuzzer, LLC v3.7.50

2 Copyright 2015 Peach Fuzzer, LLC. All rights reserved. This document may not be distributed or used for commercial purposes without the explicit consent of the copyright holders. Peach Fuzzer is a registered trademark of Peach Fuzzer, LLC. Peach Fuzzer contains Patent Pending technologies. While every precaution has been taken in the preparation of this book, the publisher and authors assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein. Peach Fuzzer, LLC 1122 E Pike St Suite 1064 Seattle, WA

3 1. LDAP Peach Pit: Data Sheet Peach Pit: LDAP Target: Client, Server Supported Platforms: Windows, Linux, OS X The Lightweight Directory Access Protocol (LDAP) is an application protocol to access and maintain distributed directory information services over an Internet Protocol (IP) network. The directory information can consist of contacts, personal information, group aliases, certificates, printer addresses, or any directory-like information Specifications Specification Title RFC4511 Lightweight Directory Access Protocol (LDAP) : 1.2. Use Cases Messages Specification Bind Operation RFC Unbind Operation RFC Search Operation RFC Add Operation RFC Delete Operation RFC Compare Opeartion RFC Extended Operation RFC

4 2. Target Client Configuration A configured LDAP server with an account that is defined in the configuration file is required. OpenLDAP can be used on Linux Required Pit Configuration Changes Source IPv4 Address (SourceIPv4) IPv4 address of the machine running Peach. For more information, see Retrieving Machine Information. Source Port (SourcePort) The port on the local machine used to send packets to the target machine. The default value is 389. LDAP Username (Username) Username credential to log into the LDAP service. The LDAP Username and LDAP password provide the credentials to access the LDAP service. The default Username is cn=admin,dc=nodomain. LDAP Password (Password) Password associated with the LDAP Username. The default value is admin Optional Pit Configuration Changes Timeout (Timeout) Duration, in milliseconds, to wait for the reception of incoming data. The default value is 3000 ms. A value of -1 extends the duration to infinity. During fuzzing, a timeout failure causes the fuzzer to skip to the next test case. Send Timeout (SendTimeout) Duration, in milliseconds, to wait for data to be sent. A value of -1, the default value, extends the duration to infinity. During fuzzing, a timeout failure causes the fuzzer to skip to the next test case. Accept Timeout (AcceptTimeout) Duration, in milliseconds, for an incoming connection to complete. The default value is 3000 ms. A value of -1 extends the duration to infinity. During fuzzing, a timeout failure causes the fuzzer to skip to the next test case. 3

5 3. Target Server Configuration A configured LDAP server with an account that is defined in the configuration file is required. OpenLDAP can be used on Linux Required Pit Configuration Changes Target IPv4 Address (TargetIPv4) IP address of the target host machine. The default value is For more information, see Retrieving Machine Information. Target Port (TargetPort) The port on the host machine used to receive packets. The default value is 389. LDAP Username (Username) Username credential to log into the LDAP service. The LDAP Username and LDAP password provide the credentials to access the LDAP service. The default Username is cn=admin,dc=nodomain. LDAP Password (Password) Password associated with the LDAP Username. The default value is admin Optional Pit Configuration Changes Connect Timeout (ConnectTimeout) Duration, in milliseconds, for an outgoing connection request to complete. The default value is ms. A value of -1 extends the duration to infinity. During fuzzing, a timeout failure causes the fuzzer to skip to the next test case. Timeout (Timeout) Duration, in milliseconds, to wait for the reception of incoming data. The default value is 5000 ms. A value of -1 extends the duration to infinity. During fuzzing, a timeout failure causes the fuzzer to skip to the next test case. Send Timeout (SendTimeout) Duration, in milliseconds, to wait for data to be sent. A value of -1, the default value, extends the duration to infinity. During fuzzing, a timeout failure causes the fuzzer to skip to the next test case. 4

6 4. Retrieving Machine Information Interface names, hardware addresses, and IP addresses are used when fuzzing network protocols. Windows, Linux, and OS X each have their idiosynchrasies in reporting machine configuration details. This appendix provides an example of retrieving the machine information Interface name, MAC address, and IP v4 and v6 addresses from each of the operating systems Windows In Windows, ipconfig runs from the command line interface. Using the all parameter, ipconfig /all, displays the pieces of information. The following illustration calls out instances of the Interface name, MAC address, and IP addresses. 5

7 Figure 1. ipconfig //all command Interface Name The interface name is part of the main entry on the line not indented and immediately follows the word "adapter". The previous illustration identifies two interfaces "Local Area Conection 2" and "Ethernet". The Interface name does not include the asterisk (*). You need to remove the asterisk, if present, when specifying the interface name to Peach. MAC Address The MAC address, labeled the "Physical Address" by ipconfig, is the address of the hardware interface. The entry is just a few lines into the detail, as shown in the previous illustration. 6

8 IPv4 Address The IP v4 address is the value labeled "IPv4 Address". The previous illustration calls out the IP v4 Address of the Ethernet interface. IPv6 Address The IP v6 address is the value labeled "Link-local IPv6 Address". The previous illustration calls out the IP v6 Address of the Ethernet interface. You can confirm the correctness of an IP v4 or IP v6 address by using ping or ping -6 followed by the appropriate IP address. For IP v6, the value fe80 in the leftmost block of hex digits indicates a link local address (i.e. a local network) Linux In Linux, ifconfig provides all of the needed information. The main entries reported by ifconfig identify each addapter by name, type, and other attributes. The following illustration calls out instances of the Interface name, MAC address, and IP addresses. 7

9 Figure 2. Linux ifconfig command Interface Name The interface name is in leftmost column. Additional details are provided on indented lines. The previous illustration calls out the "eth0" and "lo" interfaces. The MAC address The MAC address is labeled with "HWaddr", and is located on the first line of the interface entry. The previous illustration calls out the MAC address of the "eth0" interface. IPv4 Address The IP v4 address is labeled with "inet addr", and is located in one of the first detail lines. The previous illustration calls out the IP v4 address of the "eth0" interface. 8

IPv6 Address The IP v6 address is labeled with "inet6 addr", and is follows the IP v4 address in the listing detail. The previous illustration calls out the IP v6 address of the "eth0" interface.

10 IPv6 Address The IP v6 address is labeled with "inet6 addr", and is follows the IP v4 address in the listing detail. The previous illustration calls out the IP v6 address of the "eth0" interface. You can confirm the correctness of an IP v4 or IP v6 address by using ping or ping6 followed by the appropriate IP address. For IP v6, the value fe80 in the leftmost block of hex digits indicates a link local address (i.e. a local network) OS X In OS X, ifconfig provides all of the needed information. The main entries reported by ifconfig identify each addapter by name, type, and other attributes. The following illustration calls out instances of the Interface name, MAC address, and IP addresses. Figure 3. OS X ifconfig command Interface Name The interface name is in leftmost column. Additional details are provided on indented lines. The previous illustration calls out the "en0" and "en1" interfaces. MAC Address The MAC address is labeled with "ether", and is located on the first line of the interface entry. The 9

11 previous illustration calls out the MAC address of the "en0" and "en1" interfaces. IPv4 Address The IP v4 address is labeled with "inet ", and is located further down in the interface details. The previous illustration calls out the IP v4 address of the "en1" interface. IPv6 Address The IP v6 address is labeled with "inet6 ", and is located further down in the interface details. The previous illustration calls out the IP v4 address of the "en1" interface. You can confirm the correctness of an IP v4 or IP v6 address by using ping or ping6 followed by the appropriate IP address. For IP v6, the value fe80 in the leftmost block of hex digits indicates a link local address (i.e. a local network). 10

CoAP Peach Pit User Guide. Peach Fuzzer, LLC. Version

CoAP Peach Pit User Guide. Peach Fuzzer, LLC. Version CoAP Peach Pit User Guide Peach Fuzzer, LLC Version 3.7.64 Copyright 2015 Peach Fuzzer, LLC. All rights reserved. This document may not be distributed or used for commercial purposes without the explicit