search

lgandx / Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
GNU General Public License v3.0
5.48k stars 776 forks source link

-F parameter does not work #270

Closed firatus closed 6 months ago

firatus commented 8 months ago

When i start responder with these commands; responder -Fdw or -Fdwb I couldn't catch ntlm response. does it not work? image image Sending basic authentication but does not appear from my victim pc. Same performed when i do not use -b parameter.

lgandx commented 6 months ago

-F option was built for WPAD.dat file. A few years ago, Microsoft products were still sending NTLM auth for wpad.dat. Nowadays there is no need to use -F, authentication request on the browser.

Btw, if you're going to use the DHCP module, make sure to add the -P option ;)