DominoDig Open source script for mining useful data from anonymously accessible Lotus Domino web databases
Download

DominoDig Ranking & Summary

DominoDig Tags

parse database audit database audit database parser domino audit

DominoDig Description

Open source script for mining useful data from anonymously accessible Lotus Domino web databases DominoDig is a perl program designed to help facilitate auditing Lotus Domino web servers. Produces an HTML report that provides a list of all the unique .nsf databases it was able to access, as well as IP addresses and email addresses.DominoDig was born out of the frustration encountered when using the Open Source Vulnerability Scanning Tool NESSUS. There is a NASL script that checks for the presence of various default Notes databases, and then helpfully informs you that one or more of them has been accessed. But it's up to you to figure out which one(s). This tool could be used as part of an Open Source pen-test that can help one automate much of the auditing that might be involved in digging through these anonymously accessible default databases. Instead of just checking for the presence of anonymously accessible default databases, DominoDig also parses the content of each page it retrieves, looking any mention of any other notes databases present on the system. Here are some key features of "DominoDig": · User definable scan depth: Can do a quick, 2 link deep scan or a lengthy 20 link deep scan. Text or HTML-based report containing the following details: · Lists all email addresses found · Lists all unique IP addresses found · Lists all unique .nsf Databases found · Total number of bytes parsed Requirements: · Perl 5.6.1 or later · LibWWWPerl (LWP) · Crypt::SSLeay What's New in This Release: · Just finally added SSL support FOR REAL this time and included the old defdb.lst file from 0.68a.

DominoDig Related Software