Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Nmap NSE net: http-domino-enum-passwords

Information

Severity

Severity

High

Family

Family

Nmap NSE net

CVSSv2 Base

CVSSv2 Base

7.5

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Solution Type

Solution Type

Mitigation

Created

Created

12 years ago

Modified

Modified

5 years ago

Summary

Attempts to enumerate the hashed Domino Internet Passwords that are (by default) accessible by all authenticated users. This script can also download any Domino ID Files attached to the Person document. SYNTAX: domino-enum-passwords.idpath: the path where downloaded ID files should be saved If not given, the script will only indicate if the ID file is donwloadable or not domino-enum-passwords.count: the number of internet hashes and id files to fetch. If a negative value is given, all hashes and id files are retrieved (default: 10) domino-enum-passwords.path: points to the path protected by authentication http.pipeline: If set, it represents the number of HTTP requests that'll be pipelined (ie, sent in a single request). This can be set low to make debugging easier, or it can be set high to test how a server reacts (its chosen max is ignored). domino-enum-passwords.hostname: sets the host header in case of virtual hosting http-max-cache-size: The maximum memory size (in bytes) of the cache.