ToolsFebruary 9, 20261 min readby 0xt0pus

Responder

LLMNR/NBT-NS/mDNS poisoner for capturing NTLMv2 hashes on the network


Responder

Description

Responder is used for LLMNR, NBT-NS, and MDNS poisoning. It captures NTLM hashes from Windows machines by responding to name resolution requests on the network.

Usage 1: Start Responder to Capture Hashes

Command:

sudo responder -I tun0

Command (Verbose mode):

responder -I tun0 -v