Re: Lotus NOTES

Bruno,

You may want to check out a little utility I wrote to assist in auditing Lotus Domino servers in specific.

DominoDig is an open-source (GPL) utility written by myself (Grant Torresan) for the purpose of quickly and cheaply auditing Lotus Domino web servers and extracting useful information from any anonymously accessible pages that are found.

Features of note include the following:

-Searches for a large number of default notest databases. -Parses contents of each page it accesses looking for references to other unique (custom) .nsf databases.
-Collects email addresses and unique IP addresses that appear in any page it indexes.
-Produces an HTML report detailing all of the information it was able to gather, and a list of hyperlinks to each .nsf database it was able to access anonymously.

If you are interested in trying it out, please browse to http://dominodig.sourceforge.net for the latest release. Please note that this software is a "work-in-progress" and as such it is being freqently updated and new features are being added all the time. If there is a paricular piece of information DominoDig is not searching for that you think would be particularly useful, or if you encounter any problems with the software, please let me know by sending me an email at sonofthor@severus.org.

Hope this helps,

Grant Torresan.

• Original Message ----- From: "Aaron C. Newman (Application Security, Inc.)" <anewman@appsecinc.com> To: "'Bruno Mosconi'" <bmosconi@fnazca.com.br>; <vulndev @securityfocus.com> Sent: Sunday, December 01, 2002 4:04 PM Subject: RE: Lotus NOTES

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

> Bruno,
app_type=8&category
> =3
>
> Regards,
> Aaron
> _______________________________
> Aaron C. Newman
> CTO/Founder
to
> which it is addressed and may contain confidential and/or privileged
or
> taking of any action in reliance upon, this information by persons or
Received on Mon Dec 2 02:58:47 2002