MITRE ATT&CK / Software / S0174

Responder

ID
S0174
Type
Tool
Source
attack.mitre.org
MITRE last modified
17 Apr 2025

Responder is an open source tool used for LLMNR, NBT-NS and MDNS poisoning, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. [1]

Techniques used (2)

Groups using it (3)

References

  1. GitHub Responder