05-30-2018, 04:47 AM
(05-28-2018, 04:37 PM)royce Wrote: If everything after the colon is a single, uninterrupted string of hex, then it's a 56-byte string, which is pretty close to -m 9100 (Lotus Notes/Domino 8).Yes. No idea about the version of Lotus used.
(05-28-2018, 04:37 PM)royce Wrote: Do you have access to the platform itself, such that you could hash a known plaintext (like 'hashcat') and post its unredacted hash for analysis?No access to the platform, I'm trying to access the files using a trial copy of Lotus Notes 8.5.
I've created a user ID with the password 'hashcat', and hashing using lotus2john give me the results with the same number of characters:
user.id:67CB83F48C62EF662656FF0945EAB77DD30017703384B627494DEAACFB6349C1AA71D16E3317EA6FCBF6E4C1F07F45EE3C8343081EE1DA2B
Hope it helps.