https://leikah.haoyingcao.xyz/en/tags/llmnr/Recent content in LLMNR on LEIKAHHugoenhttps://leikah.haoyingcao.xyz/en/docs/active_directory/initial_access/llmnr_poison/Mon, 01 Jan 0001 00:00:00 +0000https://leikah.haoyingcao.xyz/en/docs/active_directory/initial_access/llmnr_poison/<p>LLMNR (Link-Local Multicast Name Resolution), NBT-NS (NetBIOS Name Service), and mDNS (Multicast DNS) are protocols and services utilized by Windows as alternative methods of host identification when DNS fails to resolve a hostname. These protocols will ask all other machines on the local network for the correct address, and <strong>ANY host</strong> on the network can reply and provide a response.</p> <p>LLMNR/NBT-NS/mDNS Poisoning is an effective way to obtain an initial set of credentials when we have a local network address in a network running Active Directory.</p>