schwankner/CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit

PoC

IBM Lotus Domino <= R8 Password Hash Extraction Exploit

view exploit source poc_in_githubauthor schwanknerpublished 2019-03-29catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2005-2428US	medium5.0OT high	73.0% (99th)	Exploit	2005-08-03
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the H…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.