HLC Domino / Notes

HCL Notes (formerly Lotus Notes then IBM Notes) is a proprietary collaborative software platform for Unix (AIX and IBM i), Windows, Linux and macOS, sold by HCLTech. The client application is called Notes while the server component is branded HCL Domino.

Enumeration

Look for files with HTTP 200 OK response. For example:

  • names.nsf: file at server side called as Domino Directory. Names.nsf is the utmost imperative file that the Domino Server contains.
  • domcfg.nsf/all: Domino web server configuration database
wget https://gist.githubusercontent.com/hxlxmjxbbxs/aad4935de4aa7bf48610a70a87ad2c8f/raw/286c975cd79d777ae50547dd8d37a67bf3607de6/lotus_domino.txt
ffuf -w 'lotus_domino.txt' -u https://[TARGET:PORT]/FUZZ -H 'User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)' -ac -mc 200