killchain-compendium/Miscellaneous/Responder.md

417 B

Responder

Impersonate Domain -- Change Responder's certificates

  • After using nsupdate to add the attacker as a subdomain do the following tasks
  • Add a certificate and its private key to
/usr/share/responder/certs
  • Edit Responder.conf
[HTTPS Server]

; Configure SSL Certificates to use
SSLCert = certs/cert.pem
SSLKey = certs/key.pem
  • Start responder
responder -I <interface>