Extracting “data” from IBM Lotus Notes

No ratings

Presented at BSidesLjubljana 2018 by

IBM (Lotus) Notes/Domino systems had their haydays in the 1990ties. Still quote a lot of banks, insurances, etc. store loads of business relevant data in those applications and even expose them to the Web.After a short introduction to the technology and security concepts behind Notes/Domino, I will guide you through the convinient options to extract data from these systems.After a quick tour through the most dangerous worst practices in Domino administration, that open up vulernabilities we will end with password extraction and decryption.