# LLMNR Poisoning - Responder

Link Local Multicast Name Resolution < > DNS

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FSIAAoWMwSVdxBo9O2rvc%2FUntitled%20picture.png?alt=media&#x26;token=1267c66e-b607-408e-87d7-20426e589c6e" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FP483NEiixgZZfmqLyAKO%2FUntitled%20picture.png?alt=media&#x26;token=55190bf7-9ef5-4d7d-9b5d-a5b2533ef99f" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FGYoB4jV6pjaWiA0qnsVr%2FUntitled%20picture.png?alt=media&#x26;token=02654863-9814-443c-a700-7a2609541446" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FYe3D9exst94zayGvVGpr%2FUntitled%20picture.png?alt=media&#x26;token=6edcb975-456d-4f7a-8cc9-c7ed48ff9780" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2F6y6FLJ6lh6O6vWYlm2jg%2FUntitled%20picture.png?alt=media&#x26;token=b8f80919-58c2-4727-a2f0-ff7ddb164e6a" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2Fun6cVItyPmoPBnCsyd19%2FUntitled%20picture.png?alt=media&#x26;token=4719e4ee-89d5-452b-885e-f7f8db3f3186" alt=""><figcaption></figcaption></figure>

**Responder config for SMB relay attack**

<figure><img src="https://3722880708-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8Jk7bAtIA6fLVYBLmpdJ%2Fuploads%2FGZsUyPmBGFKIsDhLnJ7R%2FUntitled%20picture.png?alt=media&#x26;token=8d29b546-c012-4fdc-b7fd-7ee7ea35a31f" alt=""><figcaption></figcaption></figure>

{% embed url="<https://ethicalhackingguru.com/the-complete-ntlm-relay-attack-tutorial/>" %}

{% embed url="<https://www.ivoidwarranties.tech/posts/pentesting-tuts/responder/guide/>" %}

{% embed url="<https://www.a2secure.com/en/blog/how-to-use-responder-to-capture-netntlm-and-grab-a-shell/>" %}

{% embed url="<https://www.cynet.com/attack-techniques-hands-on/llmnr-nbt-ns-poisoning-and-credential-access-using-responder/>" %}

{% embed url="<https://notsosecure.com/pwning-with-responder-a-pentesters-guide>" %}

\[\\

\
]\(<https://ethicalhackingguru.com/the-complete-ntlm-relay-attack-tutorial/https://www.ivoidwarranties.tech/posts/pentesting-tuts/responder/guide/https://www.a2secure.com/en/blog/how-to-use-responder-to-capture-netntlm-and-grab-a-shell/>)
