MITRE ATT&CKsoftware (tool)

S0174 Responder

Published 2018-01-16 Modified 2025-04-16 Official page ↗
Domain
enterprise
Version
1.2
Created
2018-01-16

Description

Responder is an open source tool used for LLMNR, NBT-NS and MDNS poisoning, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Related

Uses · MITRE ATT&CK (2)

  • T1557.001 Name Resolution Poisoning and SMB Relay sub-technique
  • T1040 Network Sniffing technique

Referenced by MITRE ATT&CK · uses (4)

  • C0022 Operation Dream Job campaign
  • G1003 Ember Bear group
  • G0007 APT28 group
  • G0032 Lazarus Group group

References