../attack-int
Attack AD
LLMNR/NBT-NS poisoning
Tools
- Responder
Needed port : UDP:137, UDP138, UDP53, UDP/TCP389, TCP1433, UDP1434, TCP80, TCP135, TCP139, TCP445, TCP21, TCP3141, TCP25, TCP110, TCP587, TCP3128, Multicast UDP 5355 & 5353
- Inveigh (Good for console mode with escape key)
2 version, compiled and PS1, PS1 is deprecated
Metasploit
Hashcat when we got the hashes
Glossary
- LLMNR (Link Local Multicast Name Resolution | UDP:5355) / NBT-NS (NetBIOS Name Service | UDP:137) : Services that allows host id when DNS fail