// what it is
Description
Laurent Gaffié's tool that sits on a Windows network, answers broadcast name-resolution queries for nonexistent hosts, and captures the NTLM authentication the responding hosts attempt. Within minutes of plugging into a corp LAN, hashes start rolling in.
// use cases
What people use it for
- Internal pentest first-move
- NTLM hash capture for offline cracking
- Relay attack input
// commands
The commands you'll type
Default on eth0
$ responder -I eth0 -A