Commit graph

113 commits

Author SHA1 Message Date
lgandx
b510b2bb25 Added py3 and py2 compatibility + many bugfix 2020-01-09 14:47:56 -03:00
lgandx
c52843a535 Added RDP rogue server 2019-08-17 16:31:34 -03:00
Matthew Daley
bff935e71e Add Microsoft SQL Server Browser responder
When connecting to a named instance, a SQL client (at least SQL Server
Native Client) will send a request (namely a CLNT_UCAST_INST message) to
the server's SQL Server Browser service for instance connection
information. If it gets no response, the connection attempt fails.

By adding a SQL Server Browser responder for these requests, we ensure
that connections are successfully made to the SQL Server responder for
hash capture.

As per the comment, this is based on the document "[MC-SQLR]: SQL Server
Resolution Protocol", currently available at
<https://msdn.microsoft.com/en-us/library/cc219703.aspx>.
2017-06-28 19:14:38 +12:00
lgandx
2b322b227e minor fix 2017-02-18 20:57:36 +01:00
lgandx
21d48be98f Added: Hashdump, Stats report 2017-02-18 20:38:40 +01:00
lgandx
0642999741 fixed crash: typo. 2017-02-10 18:18:23 +01:00
skelsec
2c32704b85 SimpleSSL 2017-02-06 09:42:35 -08:00
lgandx
ce211f7fcf Fixed the bind to interface issue (https://github.com/lgandx/Responder/issues/6) 2016-10-12 00:24:31 -03:00
lgandx
04c270f6b7 Added option -e, specify an external IP address to redirect poisoned traffic to. 2016-09-11 20:25:10 -03:00
lgandx
29ad8a0816 Firefox blacklisted on WPAD since it doesn't honors fail-over proxies. Added SO_LINGER to send RST when close() is called. 2016-09-11 13:07:44 -03:00
lgandx
23151fee42 minor fix 2016-09-10 21:31:58 -03:00
lgandx
82fe64dfd9 Added proxy auth server + various fixes and improvements 2016-09-10 21:25:55 -03:00
lgandx
b34fee1d8c Minor fixes 2016-09-09 02:54:30 -03:00
jvoisin
86fb1ab328 Minor refactoring of the main script 2016-07-05 01:31:43 +02:00
lgandx
8171a96b9e Fixed some tools and +x on some executables 2016-06-05 19:55:32 -05:00
lgandx
a66322a307 Merging byt3bl33d3r fixes 2016-06-05 17:56:54 -05:00
Matt Andreko
008b492c98 First round of cleanup 2015-10-27 16:50:05 -04:00
lgandx
59e48e80dd Added: Support for OSx 2015-10-08 19:50:08 -04:00
lgandx
d0f5b9a39e minor changes 2015-10-08 19:40:51 -04:00
jrmdev
bc06818ed1 Further improvement and fixes. 2015-07-07 16:21:28 +10:00
jrmdev
066c15154d Further improvements and fixes. 2015-07-02 13:32:10 +10:00
jrmdev
c6de2e9d3a Many changes, bug fixes and improvements. scripts in 'tools' still need to be fixed. 2015-06-30 16:49:53 +10:00
jrmdev
050edc22f3 Complete refactoring of responder code, first pass 2015-06-29 22:20:58 +10:00
jrmdev
f4bd612e08 Added support for upstream proxies for the rogue WPAD server 2015-06-29 18:56:28 +10:00
lanjelot
ddaa9f8767 Fixing a bug in HTTP proxy, was calling recv() too many times 2015-03-05 15:33:41 +11:00
lgandx
36ef78f85a Added: DontRespondToName and DontRespondTo; NAC/IPS detection evasion 2014-11-27 18:36:33 -05:00
lgandx
c05bdfce17 Added --version and kost's fix for /etc/resolv.conf empty lines parsing. 2014-09-14 14:10:11 -04:00
lgandx
cf7b4771ca Fixed serve-always and serve-exe with the new WPAD server. 2014-08-26 02:51:00 -04:00
lgandx
f69e93c02e Added: Log command line in Responder-Session.log. 2014-08-26 00:56:16 -04:00
lgandx
235f0fa8ae minor fix 2014-08-16 08:20:43 -04:00
lgandx
0660cc2fe7 minor fix 2014-08-16 08:18:55 -04:00
lgandx
5c9fec923c fixed: identation. 2014-06-09 22:16:01 -04:00
lgandx
4558861ce2 Fixed high cpu usage in some specific cases 2014-05-27 22:24:20 -04:00
lgandx
af30d21908 minor change 2014-04-23 01:39:44 -04:00
lgandx
a21aaf7987 Removed: old style options. Just use -r instead of -r On 2014-04-23 00:20:00 -04:00
lgandx
1c79bedac9 Added: in-scope llmnr/nbt-ns name option 2014-04-16 14:33:57 -04:00
lgandx
dcede0fdf5 Added: Kerberos server and -d cli option. 2014-04-16 12:23:04 -04:00
lgandx
c97a13c1bd Fixed [Enter] key issue 2014-04-01 16:03:39 -04:00
lgandx
f377326d96 minor fix 2014-03-31 08:36:20 -04:00
lgandx
b14ff0b36a Added: In-scope IP handling for MDNS 2014-03-22 13:33:03 -04:00
lgandx
05b78079a8 Reflected recent changes 2014-03-22 13:19:56 -04:00
lgandx
90479adcca Added: MDNS Poisoner 2014-03-22 03:10:06 -04:00
lgandx
a1a4f46c7b fix: Bind to interface bug. 2014-03-20 22:37:10 -04:00
lgandx
81b1f8f2c1 minor fix 2014-03-19 22:17:58 -04:00
lgandx
d0fc37fa42 minor change 2014-02-19 19:35:35 -05:00
lgandx
f5b21d992a Merge branch 'master' of https://github.com/SpiderLabs/Responder
merged with latest version
2014-02-19 19:29:29 -05:00
lgandx
2fdc74a089 minor fixes 2014-02-19 19:29:19 -05:00
Rob Fuller
094824bfd3 Case-insensitive content-type check
Was noticing that injection wasn't happening when the header was "Content-type" instead of the checked for "Content-Type". Headers could probably be put as .lower() from the beginning, but then again there might be header content that may break because of it.
2014-02-10 16:55:11 -05:00
lgandx
2c9273eb2c Added: Analyze mode; Lanman Domain/SQL/Workstation passive discovery. 2014-02-05 22:09:50 -05:00
lgandx
b4d2fe273a Blacklisted 127.0.0.1 as a plausible DNS server 2014-01-30 00:21:18 -05:00