Sniffing & MITM

Responder

LLMNR/NBT-NS/MDNS poisoner that captures NetNTLM hashes on LANs.

intermediate

Linux

Exploitation

Enumeration

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

On internal Windows networks (authorized) where name resolution poisoning is in scope.

Run on interface; wait for authentications; crack or relay hashes.

Common real-world internal attack path.

Commands & usage

sudo responder -I eth0 -wd

sudo responder -I eth0 -wrf

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Bettercap

Network attack framework for recon, MITM, sniffing, and wireless.

Ettercap

Classic suite for MITM attacks on LAN.