CVE-2007-0977

This script exploits CVE-2007-0977 to dump sensitive information, including password hashes, from Lotus Domino R5/R6 WebMail by querying the names.nsf database via HTTP requests. It automates the extraction of hidden form fields containing user credentials and metadata.

This Metasploit auxiliary module exploits an information disclosure vulnerability in Lotus Domino to extract password hashes from the names.nsf database. It supports both authenticated and unauthenticated access, depending on server configuration.