rufflabs / psresponded Goto Github PK View Code? Open in Web Editor NEW 1.0 1.0 0.0 119 KB PowerShell script that periodically sends LLMNR requests to a known non-existent hostname, if anything responds this could indicate a Responder like spoofing attack and an entry to the Event Log is written with the IP that responded. PowerShell 100.00% Introduction ยท People ยท Discuss
Support multiple hostnames Add support for providing multiple hostnames, and randomly choosing a hostname during each resolution. This will help avoid detection.
Running as normal user does not exit. When running as normal user, it does not exit due to not running as administrator. Need to check if administrator, and if you aren't administrator just skip all event log logging.
Once triggered, hostname resolves and script cannot be re-ran until default 1200 TTL passes After a triggering event, until the default TTL of 1200 passes the hostname will resolve.
Vue.js ๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
javascript JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Machine learning Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Facebook We are working to build community through open source technology. NB: members must have two-factor auth.