https://notesbynisha.com/tags/llmnr/Recent content in LLMNR on Notes by NishaHugoen&copy; 2026 NishaSun, 21 Jul 2024 00:00:00 +0000https://notesbynisha.com/posts/2024-07-21-understanding-llmnr-poisoning-attacks/Sun, 21 Jul 2024 00:00:00 +0000https://notesbynisha.com/posts/2024-07-21-understanding-llmnr-poisoning-attacks/<h2 id="introduction" class="relative group">Introduction <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100"><a class="group-hover:text-primary-300 dark:group-hover:text-neutral-700" style="text-decoration-line: none !important;" href="#introduction" aria-label="Anchor">#</a></span></h2><p>In this blog post, I discuss a common network attack called Link-Local Multicast Name Resolution (LLMNR) poisoning. This type of attack can be highly effective in capturing NTLMv2 hashes, which can then be used to gain unauthorized access to systems in a Windows environment. I will also share insights on how to mitigate this this type of vulnerability attack, ensuring your network remains secure. To illustrate this attack, I have included screenshots from my recent lab demonstration where I successfully captured NTLMv2 hashes using Responder. <img src="https://notesbynisha.com/assets/images/tcm-academy/tcm-llmnr-1.png"></p>