Re: UserID and hashed password for Lotus Domino

["Valgasu" <valgasu () securiteinfo com>]

 Hi,
 
> Is there any way to obtain the password from the
> UserID, or to crack and obtain the password from its
> hash?
> (I read it was released a tool named "sesame"... any
> clue? here for more info about it:
> http://online.securityfocus.com/news/66 )
 
For the UserID file you can use ID Password Recovery
(http://www.cqure.net/tools04.html) and for the HTTP hash
Domino Hash Breaker (http://www.securiteinfo.com/download/dhb.zip)
 
This 2 tools work only in dictionary attack.
 
 Eric