• webexplore

Web Exploration

• Firefox tricks
  1. Open page, and the in the address bar enter

     •       javascript:alert(document.cookie) 

       to see the cookies.
  2. Lotus Notes

     1.          javascript:void(document.forms[0].submit())  

        will save a web form even if you have hidden the Save button!
     2. catalog.nsf database obviously gives you a list of other databases that you can then look at.

     3. Another interesting database is the Name & Address book (typically /names.nsf)

     4. Depending on the version of Domino is running, you can try accessing the hidden $Users view of the Name & Address book. This view contains the unsalted HTTP password hashes of all the users. You would typically look for http://noteshost/names.nsf/$Users

     5. http://www.sdii.com/Falling-Dominos-FAQ-1.0.PDF

     6. Change Notes db ACL

...