| To: | pen-test@securityfocus.com |
|---|---|
| Subject: | Domino testing |
| From: | "A Plasmoid" <skinodo@gmail.com> |
| Date: | Fri, 20 Jul 2007 16:22:03 -0400 |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | pentest-list2@consult.net |
| Delivered-to: | mailing list pen-test@securityfocus.com |
| Delivered-to: | moderator for pen-test@securityfocus.com |
| Dkim-signature: | a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=Puh8OP9cNrL02jXmEoHMlw5aZQub2mfUsElQjwiqA4qJadxK3bOJIgDw9HhN/ZPNmamB/XtZJ0IfSE7cayzJpXETNDakMGWGN781SgCODvMCickK4AxrGmt3uOlsfMWUmZZQlW/dXada8qe6/sKG0wRa+l+110DiCFUVkQTaTpQ= |
| Domainkey-signature: | a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=rmAeKBwhQJgbboUgH2ArPx9rp44fg13EteKUBoFfLn2DIfycDX+Daw62Z1u8EcRWCbPHbLFWNtSUt5ENqtsrl3DNVWrX6rnI5DuCLl2Yr6+5TWqrNblrWqbYynfBBMmwbCSlzGcQj7JpVBtOc7jfgPd1M0BXT9J5FXTkH23BJU0= |
| List-help: | <mailto:pen-test-help@securityfocus.com> |
| List-id: | <pen-test.list-id.securityfocus.com> |
| List-post: | <mailto:pen-test@securityfocus.com> |
| List-subscribe: | <mailto:pen-test-subscribe@securityfocus.com> |
| List-unsubscribe: | <mailto:pen-test-unsubscribe@securityfocus.com> |
| Mailing-list: | contact pen-test-help@securityfocus.com; run by ezmlm |
| Resent-date: | Fri, 20 Jul 2007 14:12:02 -0600 (MDT) |
| Resent-from: | pen-test-return-1078484644@securityfocus.com |
| Resent-message-id: | <20070720201202.9F255143F97@outgoing2.securityfocus.com> |
| Resent-sender: | listbounce@securityfocus.com |
| Sender: | listbounce@securityfocus.com |
I'm new to Domino testing, and have found a few interesting databases. I am wondering if there is anything that could be done with them.Specifically, there are: cldbdir.nsf dba4.nsf qstart.nsf /sample/faqw46.nsf /sample/pagesw46.nsf (several others in sample) /help/help5_designer.nsf (several others in help) The ?EditDocument functionality is locked down with "basic authentication" but I can view them.There is not a lot of info (that I have found) regarding domino, so I'm hoping that some kind person here can tell me whether these things can be leveraged into a deeper level of access or not. All of the other "important" databases like names.nsf, webadmin.nsf, and others are also protected with basic auth. Thanks for any hints, clues, and even "Google is your friend" stuff (as long as there is a corresponding reasonable search parameter ) :) ------------------------------------------------------------------------ This List Sponsored by: Cenzic Swap Out your SPI or Watchfire app sec solution for Cenzic's robust, accurate risk assessment and management solution FREE - limited Time Offer http://www.cenzic.com/c/wf-spi ------------------------------------------------------------------------ |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Interesting find on GPSDrive with Kismet, rajat swarup |
|---|---|
| Next by Date: | Penetration Testing on Mac OS X, michael-hermann |
| Previous by Thread: | Interesting find on GPSDrive with Kismet, rajat swarup |
| Next by Thread: | Re: Domino testing, Marco Ivaldi |
| Indexes: | [Date] [Thread] [Top] [All Lists] |