646 Commits
Author SHA1 Message Date
lgandx 424fbe53d6 Merge pull request #342 from Chick3nman/sasl-format-change
Update SASL hash format to align with hashcat module expected format
2026-06-10 11:28:34 -03:00
Chick3nman 44222d726c Update SASL hash format to align with hashcat module expected format 2026-06-10 02:15:17 -05:00
lgandx 92ea4e9af1 Merge pull request #341 from ChrisJr404/dontrespondto-ipv6
fix(DontRespondTo): handle IPv4-mapped IPv6 client addresses (#314)
2026-05-16 19:17:42 -03:00
lgandx a1cb74e43c Merge pull request #339 from johnnyxmas/macos-improvements
Update macOS support: rename IsOsX, replace launcher script
2026-05-16 19:09:40 -03:00
Chris (ChrisJr404) 4b92fb172e fix(DontRespondTo): handle IPv4-mapped IPv6 client addresses (#314)
When Responder runs on a dual-stack interface, IPv4 clients arrive at
the IPv6 listener with an `::ffff:`-prefixed address (RFC 4291 §2.5.5.2).
That breaks two pieces of DontRespondTo logic:

1. `RespondToThisIP()` checks `ClientIp.startswith('127.0.0.')` and
   `ClientIp in DontRespondTo`, so `::ffff:127.0.0.1` and
   `::ffff:10.0.0.42` slip past both filters even when the operator
   listed them.
2. `expand_ranges()` in `settings.py` chokes on `::ffff:10.0.0.42`
   because the IPv6 branch tries `int('10.0.0.42', base=16)`.

Fix both by stripping the `::ffff:` prefix as the first step in each
function, so the embedded IPv4 address falls through to the existing
IPv4 path and matches DontRespondTo entries written in either form.

Also guard the existing `while l.count(':') < 7` loop with a
`pos == -1` early-exit so a malformed IPv6 entry can't spin forever.
2026-05-03 10:56:54 -04:00
Johnny Xmas fdee65f964 add macOS section to README, fix OSX references 2026-03-26 00:02:31 -05:00
Johnny Xmas 22b128971c overhaul launcher: trap cleanup, fix port list, fix lsof parsing, auto-detect IP 2026-03-26 00:00:07 -05:00
Johnny Xmas 638cde8fee rename IsOsX to IsMacOS, replace OSX_launcher with macOS_Launcher 2026-03-25 23:51:03 -05:00
lgandx fb29fe25db Implemented RDNSS and DNSSL v3.2.2.0 2026-01-26 19:05:44 -03:00
lgandx f1649c136d added db locking on save to DB operations 2026-01-24 23:45:37 -03:00
lgandx 9a2144a8a1 Reformatted help output 2026-01-24 10:55:35 -03:00
lgandx 271b564bd8 Properly formatted etype 17 & 18 hashes + minor fixes 2026-01-24 10:20:54 -03:00
lgandx 83ecb7d343 Use Bind_To6 2026-01-24 10:00:26 -03:00
lgandx 2da22ce312 Now aligned with utils.py IPv6 changes 2026-01-24 09:26:02 -03:00
lgandx 1191936598 updated version number v3.2.1.0 2026-01-23 21:05:51 -03:00
lgandx b4a1423875 Changed IPv6 bind logic, now default to local link instead of routable. Can override with -6 .. 2026-01-23 20:47:03 -03:00
lgandx bb4c041481 DNS TCP binding to all 2026-01-23 20:25:03 -03:00
lgandx 9cda8146df minor update 2026-01-23 20:24:26 -03:00
lgandx b11946fcb5 removed some debug strings 2026-01-23 20:23:56 -03:00
lgandx de3eb39b20 removed useless debugging script 2026-01-23 20:23:09 -03:00
lgandx 9234d3b8f7 fixed SRV answer always set to 445. Now has complete mapping.. 2026-01-23 19:08:47 -03:00
lgandx 8bbe77a709 added: bind on IPv6 + fallback to link local in case we don't have a global addr 2026-01-23 18:32:42 -03:00
lgandx 376d2e87d2 Merge branch 'master' of https://github.com/lgandx/Responder 2026-01-07 15:10:43 -03:00
lgandx 683fa6047e updated tips jar 2026-01-07 15:10:19 -03:00
lgandx 1d41902e48 Update README.md
Long overdue README update
2026-01-07 15:05:08 -03:00
lgandx 35e6d70d83 Update README.md 2026-01-07 14:13:39 -03:00
lgandx b74f42f56a added Kerberos to NTLM downgrade 2026-01-07 12:17:22 -03:00
lgandx 1f7858a223 removed unused functions 2026-01-06 22:37:45 -03:00
lgandx 9fa97ef308 removed mysql v3.2.0.0 2026-01-06 20:56:01 -03:00
lgandx 23587f8b5d added IMAPS 2026-01-06 20:54:03 -03:00
lgandx 9db07b54d6 Added DHCPv6 poisoning + DNS filtering 2026-01-06 20:51:08 -03:00
lgandx 074f152a74 DNS server should be enabled in analyze mode since its a rogue server, not a poisoner 2026-01-06 19:55:07 -03:00
lgandx e854680360 Merge branch 'master' of https://github.com/lgandx/Responder 2026-01-06 18:54:34 -03:00
lgandx 100b1bbe00 Added STARTTLS support to imap and SMTP 2026-01-06 18:53:56 -03:00
lgandx b9646c7890 Merge pull request #336 from the-useless-one/fix_smbserver
Fix Buffer type for SMBv1/2 session request
2026-01-06 13:43:39 -03:00
yme fc9cfaf8f8 Fix Buffer type for SMBv1/2 session request 2026-01-06 17:20:52 +01:00
lgandx 367ed8a188 fixed formatting 2026-01-02 14:06:01 -03:00
lgandx 70893cdb8b minor fix 2026-01-02 13:57:48 -03:00
lgandx e264aae039 fix output 2026-01-02 13:42:14 -03:00
lgandx a8cb41d09b Now forces clients to authenticate and if possible to use RC4 + correct hash formatting when parsing type 23 2026-01-02 13:40:28 -03:00
lgandx e2a0ba041a added support for OPT, etc 2026-01-02 09:48:18 -03:00
lgandx b2b1974b2a added support for SAMR, SRVSVC, WKSSVC, WINREG, SVCCTL, ATSVC, DNSSERVER 2025-12-31 15:51:54 -03:00
lgandx 1833341a33 added suppport for imap ntlm 2025-12-31 15:49:49 -03:00
lgandx 5a114080b4 major fixes, kerberos handling, etc 2025-12-31 15:47:52 -03:00
lgandx 0ffdeb585f DNS server now supports SOA, MX, SRV, ANY, etc 2025-12-31 15:00:01 -03:00
lgandx 73507a671f Client: TGS-REQ → Responder: KRB-ERROR → AS-REQ → KRB-ERROR 25 (pre-auth required) -> AS-REQ with PA-ENC-TIMESTAMP (hash!) 2025-12-31 12:28:59 -03:00
lgandx 9c40a5d265 Added NTLM authentication for IMAP and AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5 NTLM authentication on SMTP 2025-12-31 10:14:50 -03:00
lgandx 5960d04a51 fixed hashcat hash construction 2025-12-31 09:26:17 -03:00
lgandx 44f6dd2865 msgData is a plain SEQUENCE (0x30) per RFC 3412 2025-12-31 08:42:53 -03:00
lgandx 9d4b64354c added support for all modern SNMPv3 auth algorithms 2025-12-31 02:03:26 -03:00