##master-page:HomepageReadWritePageTemplate ##master-date:Unknown-Date #format wiki #language en = Web Exploration = * Firefox tricks 1. Open page, and the in the address bar enter {{{ javascript:alert(document.cookie) }}} to see the cookies. 1. Lotus Notes 1. {{{ javascript:void(document.forms[0].submit()) }}} will save a web form even if you have hidden the Save button! 1. catalog.nsf database obviously gives you a list of other databases that you can then look at. 1. Another interesting database is the Name & Address book (typically /names.nsf) 1. Depending on the version of Domino is running, you can try accessing the hidden $Users view of the Name & Address book. This view contains the unsalted HTTP password hashes of all the users. You would typically look for http://noteshost/names.nsf/$Users 1. [[http://www.sdii.com/Falling-Dominos-FAQ-1.0.PDF]] 1. [[http://www.codestore.net/store.nsf/unid/BLOG-20031110|Change Notes db ACL]] Go to hexadecimal address 000000BC and change the value from 20 to 00. * Change the HEX value bcH (188) from 20 to 00 (This is valid With ODS 21, 41 and 43). ...