Web Exploration
- Firefox tricks
- Open page, and the in the address bar enter
javascript:alert(document.cookie)
to see the cookies.
- Lotus Notes
javascript:void(document.forms[0].submit())
will save a web form even if you have hidden the Save button!- catalog.nsf database obviously gives you a list of other databases that you can then look at.
Another interesting database is the Name & Address book (typically /names.nsf)
Depending on the version of Domino is running, you can try accessing the hidden $Users view of the Name & Address book. This view contains the unsalted HTTP password hashes of all the users. You would typically look for http://noteshost/names.nsf/$Users
Change Notes db ACL Go to hexadecimal address 000000BC and change the value from 20 to 00.
- Change the HEX value bcH (188) from 20 to 00 (This is valid With ODS 21, 41 and 43).
- Open page, and the in the address bar enter
...