Saint LDAPNightmare, Spoiler of New Year's

Patron of domain controllers that reboot themselves and everyone who runs PoCs from GitHub without reading them.

Life

He appeared on the first day of 2025, when SafeBreach published the first exploit for CVE-2024-49113: one malformed LDAP reply and the domain controller collapsed like a guest after the New Year's Eve dinner. A few days later fake PoCs turned up that, instead of crashing servers, stole the data of whoever ran them: a miracle in reverse.

Prayer

O Saint LDAPNightmare, watch over our domain controllers on New Year's Eve, and let no PoC downloaded in a hurry turn out to be a trojan. Amen.

How to celebrate

Celebrated by installing December's patches before the toast and blocking LDAP replies coming in from the internet.

New year, old LDAP: patch it not on New Year's Day, and crash the whole year away.