Re: [NSE] llmnr-resolve.nse

[Hani Benhabiles <kroosec () gmail com>]

On 08/03/2012 01:10 AM, Hani Benhabiles wrote:
> Hi list,
>
> description = [[
> Resolves a hostname by using the LLMNR (Link-Local Multicast Name 
> Resolution) protocol.
>
> The script works by sending a LLMNR Standard Query containing the 
> hostname to
> the 5355 UDP port on the 224.0.0.252 multicast address. It listens for 
> any
> LLMNR responses that are sent to the local machine with a 5355 UDP 
> source port.
>
> For more information, see:
>     * http://technet.microsoft.com/en-us/library/bb878128.aspx
> ]]
In essence, the script resolves a hostname by using the LLMNR protocol, 
which is a multicast protocol supported in Windows (Vista and newer).

I am attaching a version with updated documentation (which I omitted in 
the previously attached version.)

Cheers,
Hani.

--
Hani Benhabiles

Twitter: https://twitter.com/#!/kroosec
Blog: http://kroosec.blogspot.com

Attachment: llmnr-resolve.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/