RE: Pen-Testing Lotus Notes/Domino

From: Enno Rey (erey@security-academy.de)
Date: Tue Oct 09 2001 - 12:28:41 PDT

  • Next message: Todd Ransom: "Re: Accessing registry through command line"

    Hi,
    
    take a look at
    
    http://www.blackhat.com/presentations/bh-europe-00/TrustFactory/Trustfactory
    .ppt
    
    Lots of valuable info for a pentest or audit in it...
    
    Regards,
    
    Enno Rey
    
    
    -----Original Message-----
    From: Johann van Duyn [mailto:Johann_van_Duynat_private]
    Sent: Dienstag, 9. Oktober 2001 11:55
    To: pen-testat_private
    Subject: Pen-Testing Lotus Notes/Domino
    
    
    Hi there...
    
    I am about to do a security audit (of the semi-pen-test variety) on a
    network with Lotus Domino and Notes R5 running on it.
    
    I am a bit out of my depth regarding Domino and Notes, being a bit of an
    Exchange fan myself. Can anyone give me a few pointers and possible gotchas
    that could benefit me (and, ultimately, the company I'm working for) in
    this?
    
    Much appreciated.
    
    :-)
    
    Johann
    Confidentiality Notice: The information in this document and
    attachments is confidential and may also be legally privileged.
    It is intended only for the use of the named recipient. Internet
    communications are not   secure and therefore British American
    Tobacco does not accept legal responsibility for the contents of
    this message. If you are not the intended recipient,please notify us
    immediately and then delete this document. Do not disclose the
    contents of this document to any other person, nor take any copies.
    Violation of this notice may be unlawful.
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Tue Oct 09 2001 - 13:33:08 PDT