lgandx
b510b2bb25
Added py3 and py2 compatibility + many bugfix
2020-01-09 14:47:56 -03:00
lgandx
c52843a535
Added RDP rogue server
2019-08-17 16:31:34 -03:00
Matthew Daley
bff935e71e
Add Microsoft SQL Server Browser responder
...
When connecting to a named instance, a SQL client (at least SQL Server
Native Client) will send a request (namely a CLNT_UCAST_INST message) to
the server's SQL Server Browser service for instance connection
information. If it gets no response, the connection attempt fails.
By adding a SQL Server Browser responder for these requests, we ensure
that connections are successfully made to the SQL Server responder for
hash capture.
As per the comment, this is based on the document "[MC-SQLR]: SQL Server
Resolution Protocol", currently available at
<https://msdn.microsoft.com/en-us/library/cc219703.aspx >.
2017-06-28 19:14:38 +12:00
lgandx
2b322b227e
minor fix
2017-02-18 20:57:36 +01:00
lgandx
21d48be98f
Added: Hashdump, Stats report
2017-02-18 20:38:40 +01:00
lgandx
0642999741
fixed crash: typo.
2017-02-10 18:18:23 +01:00
skelsec
2c32704b85
SimpleSSL
2017-02-06 09:42:35 -08:00
lgandx
ce211f7fcf
Fixed the bind to interface issue ( https://github.com/lgandx/Responder/issues/6 )
2016-10-12 00:24:31 -03:00
lgandx
04c270f6b7
Added option -e, specify an external IP address to redirect poisoned traffic to.
2016-09-11 20:25:10 -03:00
lgandx
29ad8a0816
Firefox blacklisted on WPAD since it doesn't honors fail-over proxies. Added SO_LINGER to send RST when close() is called.
2016-09-11 13:07:44 -03:00
lgandx
23151fee42
minor fix
2016-09-10 21:31:58 -03:00
lgandx
82fe64dfd9
Added proxy auth server + various fixes and improvements
2016-09-10 21:25:55 -03:00
lgandx
b34fee1d8c
Minor fixes
2016-09-09 02:54:30 -03:00
jvoisin
86fb1ab328
Minor refactoring of the main script
2016-07-05 01:31:43 +02:00
lgandx
8171a96b9e
Fixed some tools and +x on some executables
2016-06-05 19:55:32 -05:00
lgandx
a66322a307
Merging byt3bl33d3r fixes
2016-06-05 17:56:54 -05:00
Matt Andreko
008b492c98
First round of cleanup
2015-10-27 16:50:05 -04:00
lgandx
59e48e80dd
Added: Support for OSx
2015-10-08 19:50:08 -04:00
lgandx
d0f5b9a39e
minor changes
2015-10-08 19:40:51 -04:00
jrmdev
bc06818ed1
Further improvement and fixes.
2015-07-07 16:21:28 +10:00
jrmdev
066c15154d
Further improvements and fixes.
2015-07-02 13:32:10 +10:00
jrmdev
c6de2e9d3a
Many changes, bug fixes and improvements. scripts in 'tools' still need to be fixed.
2015-06-30 16:49:53 +10:00
jrmdev
050edc22f3
Complete refactoring of responder code, first pass
2015-06-29 22:20:58 +10:00
jrmdev
f4bd612e08
Added support for upstream proxies for the rogue WPAD server
2015-06-29 18:56:28 +10:00
lanjelot
ddaa9f8767
Fixing a bug in HTTP proxy, was calling recv() too many times
2015-03-05 15:33:41 +11:00
lgandx
36ef78f85a
Added: DontRespondToName and DontRespondTo; NAC/IPS detection evasion
2014-11-27 18:36:33 -05:00
lgandx
c05bdfce17
Added --version and kost's fix for /etc/resolv.conf empty lines parsing.
2014-09-14 14:10:11 -04:00
lgandx
cf7b4771ca
Fixed serve-always and serve-exe with the new WPAD server.
2014-08-26 02:51:00 -04:00
lgandx
f69e93c02e
Added: Log command line in Responder-Session.log.
2014-08-26 00:56:16 -04:00
lgandx
235f0fa8ae
minor fix
2014-08-16 08:20:43 -04:00
lgandx
0660cc2fe7
minor fix
2014-08-16 08:18:55 -04:00
lgandx
5c9fec923c
fixed: identation.
2014-06-09 22:16:01 -04:00
lgandx
4558861ce2
Fixed high cpu usage in some specific cases
2014-05-27 22:24:20 -04:00
lgandx
af30d21908
minor change
2014-04-23 01:39:44 -04:00
lgandx
a21aaf7987
Removed: old style options. Just use -r instead of -r On
2014-04-23 00:20:00 -04:00
lgandx
1c79bedac9
Added: in-scope llmnr/nbt-ns name option
2014-04-16 14:33:57 -04:00
lgandx
dcede0fdf5
Added: Kerberos server and -d cli option.
2014-04-16 12:23:04 -04:00
lgandx
c97a13c1bd
Fixed [Enter] key issue
2014-04-01 16:03:39 -04:00
lgandx
f377326d96
minor fix
2014-03-31 08:36:20 -04:00
lgandx
b14ff0b36a
Added: In-scope IP handling for MDNS
2014-03-22 13:33:03 -04:00
lgandx
05b78079a8
Reflected recent changes
2014-03-22 13:19:56 -04:00
lgandx
90479adcca
Added: MDNS Poisoner
2014-03-22 03:10:06 -04:00
lgandx
a1a4f46c7b
fix: Bind to interface bug.
2014-03-20 22:37:10 -04:00
lgandx
81b1f8f2c1
minor fix
2014-03-19 22:17:58 -04:00
lgandx
d0fc37fa42
minor change
2014-02-19 19:35:35 -05:00
lgandx
f5b21d992a
Merge branch 'master' of https://github.com/SpiderLabs/Responder
...
merged with latest version
2014-02-19 19:29:29 -05:00
lgandx
2fdc74a089
minor fixes
2014-02-19 19:29:19 -05:00
Rob Fuller
094824bfd3
Case-insensitive content-type check
...
Was noticing that injection wasn't happening when the header was "Content-type" instead of the checked for "Content-Type". Headers could probably be put as .lower() from the beginning, but then again there might be header content that may break because of it.
2014-02-10 16:55:11 -05:00
lgandx
2c9273eb2c
Added: Analyze mode; Lanman Domain/SQL/Workstation passive discovery.
2014-02-05 22:09:50 -05:00
lgandx
b4d2fe273a
Blacklisted 127.0.0.1 as a plausible DNS server
2014-01-30 00:21:18 -05:00