Active Directory Pentest - Session 4 - LLMNR/NBT-NS Poisoning

Hi everyone, in this session, we will start to attack our Active Directory Lab. Our first attack is LLMNR Poisoning.
LLMNR and NBT-NS Poisoning is one of the most common attacks during internal penetration testing assessments.
In this video, we will simulate this attack, collect password hashes, and then crack them.

We will use Responder - an LLMNR, NBT-NS, and MDNS poisoner to capture the user hashes. Then, we will take the hashes offline and crack it using hashcat.
Finally, we will end the session by talking about a few defense strategies to mitigate LLMNR Poisoning!

Happy Hacking!!! :D