Purpose: Directory services, user authentication, storing and accessing directory information.

Vulnerabilities: LDAP Injection, Denial of Service (DoS), Information Disclosure, Insufficient Authentication, Weak Password Policies, Brute Force Attacks, Replication Security Issues.

Tools: LDAPSearch, LDAPEnum, Nmap, Metasploit, ldapdomaindump, Hydra, OpenLDAP, Wireshark.