LLMNR Poisoning
SecurityActive DirectoryLLMNRnetworkWindows
Link Local Multicast Name Resolution — it's basically DNS. It's used to find a host when DNS fails to do so. Previously, NetBIOS was used for this.
Flaw: when we respond to this service, it responds back with the username and password hash.
LLMNR recall3 blanks
Link Local Multicast Name Resolution is a fallback when fails to resolve a host, and it replaced the older method. Because it answers anyone on the segment, poisoning it yields the victim's username and password .
try it before revealing