Commit Graph

24 Commits (c265a371d8158ca0714be291e56ccbb7ee25cfe3)

Author SHA1 Message Date
HD Moore 0120e5c443 Cosmetic tweaks, don't report duplicate responses 2015-09-02 18:30:03 -05:00
Jon Hart 3d04d53e3a
first pass at better output and report_service 2015-09-02 10:31:46 -07:00
Jon Hart cba3650488
report_service for mdns/llmnr query 2015-08-28 14:04:52 -07:00
Jon Hart 61e23ad23e
Switch back to ::Net::DNS::Packet.new 2015-08-13 11:29:56 -07:00
Jon Hart a1c80d9f18
Fix URL 2015-02-25 08:54:08 -08:00
Jon Hart ab0d0d4ad4
Remove UDPScanner from MDNS and LLMNR mixin -- leave that for modules 2015-02-25 08:53:38 -08:00
Jon Hart 5396618a2e Build LLMNR data ourselves, since Net::DNS is too restrictive. 2015-02-24 15:37:40 -08:00
Jon Hart c0d1775d86 Show rport in each batch 2015-02-24 15:37:40 -08:00
Jon Hart 80f5e68e8e Add basic descriptions 2015-02-24 15:37:40 -08:00
Jon Hart ece84c0e30 Use build_probe 2015-02-24 15:37:39 -08:00
Jon Hart 4feda7f3e7 Allow friendly LLMNR type (PTR, ptr, 12) and class (IN, in, 1) 2015-02-24 15:37:39 -08:00
Jon Hart 4d82976740 Store LLMNR results 2015-02-24 15:37:39 -08:00
Jon Hart 9d21f29298 Update LLMNR query to use new UDPScanner functionality 2015-02-24 15:37:38 -08:00
Jon Hart 5f4c4ee4be Use correct options to Packet.new 2015-02-24 15:37:38 -08:00
Jon Hart 1e38a5db86 Use Net::DNS::Packet to build queries, static probe 2015-02-24 15:37:38 -08:00
Jon Hart 473213849f More truthy method to determine whether to print, better inspection 2015-02-24 15:37:38 -08:00
Jon Hart 5cb14255c1 Inspect any responses 2015-02-24 15:37:38 -08:00
Jon Hart d2bddd6bcd Parse and print each response (for real. 3rd time's a charm...) 2015-02-24 15:37:38 -08:00
Jon Hart 25d85b60f3 Parse and print each response (for real) 2015-02-24 15:37:38 -08:00
Jon Hart 0f5aaaf607 Parse and print each response (for now) 2015-02-24 15:37:37 -08:00
Jon Hart 9ad0fc38f7 Print something more useful with LLMNR responses 2015-02-24 15:37:37 -08:00
Jon Hart a9a6a564c6 Use LLMNR multicast address for RHOSTS by default 2015-02-24 15:37:37 -08:00
Jon Hart f4a1ce7fb6 Default RHOSTS to 224.0.0.252, the multicast group for LLMNR 2015-02-24 15:37:37 -08:00
Jon Hart 7917a70216 Initial commit of some code for LLMNR research
This is largely useless right now because LLMNR is only supposed to
work in the same multicast/broadcast domain and implementations are
supposed to ignore requests with an IP TTL != 1.
2015-02-24 15:37:37 -08:00