Re: Password cracking / recovery Lotus Notes R6

From: Simon Marechal (simon_at_lab.b-care.net)
Date: 11/28/05

  • Next message: Max: "Re: Identifying whether 2 IPs are from the same server" 
    Date: Mon, 28 Nov 2005 11:27:44 +0100
To: pen-test@securityfocus.com

    Miguel Dilaj wrote:
    > Then get you a copy of Lepton's Crack, and adapt the LotusScript in the
    > readme to incorporate it into your copy of names.nsf and dump all HTTP
    > hashes. If HTTP hashes in the old R4 format are there those can be
    > cracked with Lepton's Crack. Even if Domino is not used perhaps the
    > password is the same for Notes.

    There are JtR modules for old and new http passwords in the john contrib
    section.

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------

  • Next message: Max: "Re: Identifying whether 2 IPs are from the same server"

    Relevant Pages

    • RE: policy-based password cracker
      ... You can give Lepton's Crack a try, depending on the algorithm you need ... etc) What I want is to only brute-force passwords that fit that policy. ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • Re: Password cracking / recovery Lotus Notes R6
      ... It might be easier to break some of the 'internet passwords' in domino. ... or scripts which crack notes/domino .id files. ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • RV: Monitor program execution
      ... kind of execution of a program with access to full instalation: ... ftp, telnet, http, https, ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)
    • RE: Secure Password Policy?
      ... Making rainbow tables ... crack passwords even longer than 14 characters. ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
      (Pen-Test)
    • Re: Cisco Secret 5 and John Password Cracker
      ... Cain and Abel can be used to crack that. ... > Any other tools available to crack these types of passwords. ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
      (Pen-Test)