An environment uses broadcast-based queries for device lookups. A tester wants to capture logon credentials by responding to these queries and masquerading as the requested hosts. Which solution is best for gathering those credentials?
Responder is specifically designed to intercept broadcast-based name-resolution requests (LLMNR, NBNS, MDNS), respond as the requested host, and capture the resulting NTLM authentication attempts. Hydra performs online brute-force logins, Wireshark only observes traffic, and John the Ripper cracks passwords offline. Therefore, Responder is the ideal choice for this credential-harvesting scenario.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is LLMNR, NBNS, and MDNS?
Open an interactive chat with Bash
How does Responder capture NTLM authentication attempts?
Open an interactive chat with Bash
What are the alternatives to Responder for credential harvesting?