Commit graph

123 commits

Author SHA1 Message Date
lgandx
76f6c88df3 Added DHCP DNS vs DHCP WPAD 2021-12-12 17:55:58 -03:00
lgandx
505ec34324 Added DHCP DNS vs WPAD srv injection 2021-12-12 17:01:03 -03:00
lgandx
a0bf7a9baa minor display fix. 2021-12-12 12:26:02 -03:00
lgandx
88ea72908c Added DHCP server 2021-10-25 22:41:01 -03:00
lgandx
85315442bd Added WinRM rogue server 2021-04-19 18:12:27 -03:00
lgandx
e91e37c974 Added dce-rpc module + enhancements + bug fix. 2021-04-16 21:35:32 -03:00
lgandx
1271b8e179 Added DNS SRV handling for ldap/kerberos + LDAP netlogon ping 2021-04-12 20:42:36 -03:00
lgandx
724cfecb5a minor fix 2021-03-26 00:10:14 -03:00
lgandx
af7d27ac8c Fixed LLMNR/NBT-NS/Browser issue when binding to a specific interface 2020-09-28 08:11:41 -03:00
nickyb
f84ad05e9a Use settings.Config.Bind_To as bind address. 2020-09-07 15:29:41 +01:00
lgandx
b510b2bb25 Added py3 and py2 compatibility + many bugfix 2020-01-09 14:47:56 -03:00
lgandx
c52843a535 Added RDP rogue server 2019-08-17 16:31:34 -03:00
Matthew Daley
bff935e71e Add Microsoft SQL Server Browser responder
When connecting to a named instance, a SQL client (at least SQL Server
Native Client) will send a request (namely a CLNT_UCAST_INST message) to
the server's SQL Server Browser service for instance connection
information. If it gets no response, the connection attempt fails.

By adding a SQL Server Browser responder for these requests, we ensure
that connections are successfully made to the SQL Server responder for
hash capture.

As per the comment, this is based on the document "[MC-SQLR]: SQL Server
Resolution Protocol", currently available at
<https://msdn.microsoft.com/en-us/library/cc219703.aspx>.
2017-06-28 19:14:38 +12:00
lgandx
2b322b227e minor fix 2017-02-18 20:57:36 +01:00
lgandx
21d48be98f Added: Hashdump, Stats report 2017-02-18 20:38:40 +01:00
lgandx
0642999741 fixed crash: typo. 2017-02-10 18:18:23 +01:00
skelsec
2c32704b85 SimpleSSL 2017-02-06 09:42:35 -08:00
lgandx
ce211f7fcf Fixed the bind to interface issue (https://github.com/lgandx/Responder/issues/6) 2016-10-12 00:24:31 -03:00
lgandx
04c270f6b7 Added option -e, specify an external IP address to redirect poisoned traffic to. 2016-09-11 20:25:10 -03:00
lgandx
29ad8a0816 Firefox blacklisted on WPAD since it doesn't honors fail-over proxies. Added SO_LINGER to send RST when close() is called. 2016-09-11 13:07:44 -03:00
lgandx
23151fee42 minor fix 2016-09-10 21:31:58 -03:00
lgandx
82fe64dfd9 Added proxy auth server + various fixes and improvements 2016-09-10 21:25:55 -03:00
lgandx
b34fee1d8c Minor fixes 2016-09-09 02:54:30 -03:00
jvoisin
86fb1ab328 Minor refactoring of the main script 2016-07-05 01:31:43 +02:00
lgandx
8171a96b9e Fixed some tools and +x on some executables 2016-06-05 19:55:32 -05:00
lgandx
a66322a307 Merging byt3bl33d3r fixes 2016-06-05 17:56:54 -05:00
Matt Andreko
008b492c98 First round of cleanup 2015-10-27 16:50:05 -04:00
lgandx
59e48e80dd Added: Support for OSx 2015-10-08 19:50:08 -04:00
lgandx
d0f5b9a39e minor changes 2015-10-08 19:40:51 -04:00
jrmdev
bc06818ed1 Further improvement and fixes. 2015-07-07 16:21:28 +10:00
jrmdev
066c15154d Further improvements and fixes. 2015-07-02 13:32:10 +10:00
jrmdev
c6de2e9d3a Many changes, bug fixes and improvements. scripts in 'tools' still need to be fixed. 2015-06-30 16:49:53 +10:00
jrmdev
050edc22f3 Complete refactoring of responder code, first pass 2015-06-29 22:20:58 +10:00
jrmdev
f4bd612e08 Added support for upstream proxies for the rogue WPAD server 2015-06-29 18:56:28 +10:00
lanjelot
ddaa9f8767 Fixing a bug in HTTP proxy, was calling recv() too many times 2015-03-05 15:33:41 +11:00
lgandx
36ef78f85a Added: DontRespondToName and DontRespondTo; NAC/IPS detection evasion 2014-11-27 18:36:33 -05:00
lgandx
c05bdfce17 Added --version and kost's fix for /etc/resolv.conf empty lines parsing. 2014-09-14 14:10:11 -04:00
lgandx
cf7b4771ca Fixed serve-always and serve-exe with the new WPAD server. 2014-08-26 02:51:00 -04:00
lgandx
f69e93c02e Added: Log command line in Responder-Session.log. 2014-08-26 00:56:16 -04:00
lgandx
235f0fa8ae minor fix 2014-08-16 08:20:43 -04:00
lgandx
0660cc2fe7 minor fix 2014-08-16 08:18:55 -04:00
lgandx
5c9fec923c fixed: identation. 2014-06-09 22:16:01 -04:00
lgandx
4558861ce2 Fixed high cpu usage in some specific cases 2014-05-27 22:24:20 -04:00
lgandx
af30d21908 minor change 2014-04-23 01:39:44 -04:00
lgandx
a21aaf7987 Removed: old style options. Just use -r instead of -r On 2014-04-23 00:20:00 -04:00
lgandx
1c79bedac9 Added: in-scope llmnr/nbt-ns name option 2014-04-16 14:33:57 -04:00
lgandx
dcede0fdf5 Added: Kerberos server and -d cli option. 2014-04-16 12:23:04 -04:00
lgandx
c97a13c1bd Fixed [Enter] key issue 2014-04-01 16:03:39 -04:00
lgandx
f377326d96 minor fix 2014-03-31 08:36:20 -04:00
lgandx
b14ff0b36a Added: In-scope IP handling for MDNS 2014-03-22 13:33:03 -04:00