Episode 2 Dependency Injection: https://youtu.be/BhLpqRev80s

00:00 - Introduction
01:30 - Going over LDAP Injection, showing we can log in with a wild card for username and password
02:27 - Showing the request in BurpSuite, going over how we can enumerate data via Boolean Injection and wild card behavior
06:43 - Quickly going over Binary Search/Divide and Conquer, unfortunately, we cannot use it, but good to know for other Boolean Injections
08:45 - Start of creating our program, creating a TestPassword function, so we can replicate what we did in BurpSuite
16:15 - Creating a function that generates a lower alpha-numeric character set for us to use
20:40 - Starting the Bruteforce Logic, making a function that will bruteforce a single character
24:30 - Making the Bruteforce function, which will bruteforce each character of the password
26:30 - Talking about an optimization we can do and how many requests each method of bruteforce would do
29:07 - Creating the Prune Charset function, which will reduce our charset to only those that are in the password
32:13 - Going over each function, cleaning up some if/then statements

YouTube

This post initiates a video series aimed at teaching Golang for hackers by demonstrating a basic Golang program for performing Boolean LDAP injection to retrieve a password. The series will explore various advanced topics like dependency injection, error handling, and functional option patterns. The tutorial starts by explaining LDAP injection and uses a Hack the Box ghost machine to demonstrate the process practically.

Golang For Hackers: LDAP Injector - Episode 01