HD Moore
0120e5c443
Cosmetic tweaks, don't report duplicate responses
2015-09-02 18:30:03 -05:00
Jon Hart
3d04d53e3a
first pass at better output and report_service
2015-09-02 10:31:46 -07:00
Jon Hart
cba3650488
report_service for mdns/llmnr query
2015-08-28 14:04:52 -07:00
Jon Hart
61e23ad23e
Switch back to ::Net::DNS::Packet.new
2015-08-13 11:29:56 -07:00
Jon Hart
a1c80d9f18
Fix URL
2015-02-25 08:54:08 -08:00
Jon Hart
ab0d0d4ad4
Remove UDPScanner from MDNS and LLMNR mixin -- leave that for modules
2015-02-25 08:53:38 -08:00
Jon Hart
5396618a2e
Build LLMNR data ourselves, since Net::DNS is too restrictive.
2015-02-24 15:37:40 -08:00
Jon Hart
c0d1775d86
Show rport in each batch
2015-02-24 15:37:40 -08:00
Jon Hart
80f5e68e8e
Add basic descriptions
2015-02-24 15:37:40 -08:00
Jon Hart
ece84c0e30
Use build_probe
2015-02-24 15:37:39 -08:00
Jon Hart
4feda7f3e7
Allow friendly LLMNR type (PTR, ptr, 12) and class (IN, in, 1)
2015-02-24 15:37:39 -08:00
Jon Hart
4d82976740
Store LLMNR results
2015-02-24 15:37:39 -08:00
Jon Hart
9d21f29298
Update LLMNR query to use new UDPScanner functionality
2015-02-24 15:37:38 -08:00
Jon Hart
5f4c4ee4be
Use correct options to Packet.new
2015-02-24 15:37:38 -08:00
Jon Hart
1e38a5db86
Use Net::DNS::Packet to build queries, static probe
2015-02-24 15:37:38 -08:00
Jon Hart
473213849f
More truthy method to determine whether to print, better inspection
2015-02-24 15:37:38 -08:00
Jon Hart
5cb14255c1
Inspect any responses
2015-02-24 15:37:38 -08:00
Jon Hart
d2bddd6bcd
Parse and print each response (for real. 3rd time's a charm...)
2015-02-24 15:37:38 -08:00
Jon Hart
25d85b60f3
Parse and print each response (for real)
2015-02-24 15:37:38 -08:00
Jon Hart
0f5aaaf607
Parse and print each response (for now)
2015-02-24 15:37:37 -08:00
Jon Hart
9ad0fc38f7
Print something more useful with LLMNR responses
2015-02-24 15:37:37 -08:00
Jon Hart
a9a6a564c6
Use LLMNR multicast address for RHOSTS by default
2015-02-24 15:37:37 -08:00
Jon Hart
f4a1ce7fb6
Default RHOSTS to 224.0.0.252, the multicast group for LLMNR
2015-02-24 15:37:37 -08:00
Jon Hart
7917a70216
Initial commit of some code for LLMNR research
...
This is largely useless right now because LLMNR is only supposed to
work in the same multicast/broadcast domain and implementations are
supposed to ignore requests with an IP TTL != 1.
2015-02-24 15:37:37 -08:00