From 86a94022c0f9b318311b90ccd7428684c58af547 Mon Sep 17 00:00:00 2001
From: rbsec <robin@rbsec.net>
Date: Tue, 24 Dec 2013 11:57:13 +0000
Subject: [PATCH] Fix lotus_domino_hashes not working.

Some Lotus Domino servers prefix the "dspHTTPPassword" with a dollar
sign. Updated regex to take this into account.
---
 modules/auxiliary/scanner/lotus/lotus_domino_hashes.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/auxiliary/scanner/lotus/lotus_domino_hashes.rb b/modules/auxiliary/scanner/lotus/lotus_domino_hashes.rb
index c8429f9a9c..39c02bac5a 100644
--- a/modules/auxiliary/scanner/lotus/lotus_domino_hashes.rb
+++ b/modules/auxiliary/scanner/lotus/lotus_domino_hashes.rb
@@ -162,7 +162,7 @@ class Metasploit3 < Msf::Auxiliary
       if (res and res.body)
         short_name = res.body.scan(/<INPUT NAME=\"ShortName\" TYPE=(?:.*) VALUE=\"([^\s]+)"/i).join
         user_mail = res.body.scan(/<INPUT NAME=\"InternetAddress\" TYPE=(?:.*) VALUE=\"([^\s]+)"/i).join
-        pass_hash = res.body.scan(/<INPUT NAME=\"dspHTTPPassword\" TYPE=(?:.*) VALUE=\"([^\s]+)"/i).join
+        pass_hash = res.body.scan(/<INPUT NAME=\"\$?dspHTTPPassword\" TYPE=(?:.*) VALUE=\"([^\s]+)"/i).join
 
         if short_name.to_s.strip.empty?
           short_name = 'NULL'