Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 29 Dec 2013 04:15:28 +0100
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: Lotus Notes/Domino 8.5

On 2013-12-23 23:28, Solar Designer wrote:
> Here's a nice recent blog post:
>
> http://blog.quarkslab.com/have-you-ever-played-with-domino.html
>
> "This article deals with Lotus Domino reverse engineering, especially
> the user authentication process when a mailbox is accessed.  How password
> digest are stored?  Which cryptographic algorithms are used?  How?  We
> will end up with a bruteforce implementation using John The Ripper."
>
> and indeed there is lotus85_fmt_plug.c.  The only thing missing for
> integrating it into jumbo is a copyright and license statement,

He's added a license and the format is now committed to bleeding-jumbo. 
We need to write a new lotus2john though, since the one supplied is C++, 
Windows-only and unlicensed. But it looks totally trivial. Then we need 
to add some test vectors.

magnum


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.