Penetration Testing mailing list archives
Re: Password cracking / recovery Lotus Notes R6
From: thomas springer <tuevsec () gmx net>
Date: Mon, 28 Nov 2005 11:38:01 +0100
try to get id-files from your notes-server. they are often left on the server. have a look after the root-id (server.id) as well. if you have id's, ask the employees for the initial password of the notes-id's - most of the time they use only one password or password-scheme company-wide, and the id's hanging around on the server still use this password. install a notes-client and try, if you got valid passwords for your id's - you should be able to access every database with an administrator's notes.id.
if you can't get the password for the notes.id-files, give john the ripper a try - there's a brandnew patch for revovering notes.id-passwords, have a look on john's mailinglist-archive for more info on cracking notes.id with john.
tom Richard Zaluski wrote:
Hello, Currently I am working with a client to gain access to a Lotus Notes R6 (running on NT) database. We have full access to the box and need to penetrate the passwords on the data bases. Does anyone have tools or techniques they can suggest to achieve this goal?
------------------------------------------------------------------------------Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- Re: Password cracking / recovery Lotus Notes R6, (continued)
- Re: Password cracking / recovery Lotus Notes R6 AdamT (Nov 25)
- Re: Password cracking / recovery Lotus Notes R6 AdamT (Nov 25)
- Re: Password cracking / recovery Lotus Notes R6 Peter Wood (Nov 25)
- Re: Password cracking / recovery Lotus Notes R6 Francisco Pecorella (Nov 25)
- Re: Password cracking / recovery Lotus Notes R6 dawn (Nov 25)
- Re: Password cracking / recovery Lotus Notes R6 Joachim Schipper (Nov 25)
- Re: Password cracking / recovery Lotus Notes R6 Francois Labreque (Nov 28)
- Re: Password cracking / recovery Lotus Notes R6 AdamT (Nov 28)
- Re: Password cracking / recovery Lotus Notes R6 Joachim Schipper (Nov 28)
- RE: Password cracking / recovery Lotus Notes R6 Richard Zaluski (Nov 28)
- Re: Password cracking / recovery Lotus Notes R6 Francois Labreque (Nov 28)
- Re: Password cracking / recovery Lotus Notes R6 thomas springer (Nov 28)
- RE: Password cracking / recovery Lotus Notes R6 Miguel Dilaj (Nov 25)
- Re: Password cracking / recovery Lotus Notes R6 Simon Marechal (Nov 28)