Internal Infrastructure Pentest - LLMNR
-
LLMNR (Link Local Multicast Name Rsolution): The Link-Local Multicast Name Resolution (LLMNR) is a protocol based on the Domain Name System (DNS) packet format that allows both IPv4 and IPv6 hosts to perform name resolution for hosts on the same local link.
- LLMNR allow machines on the same subnet help each other identify hosts when DNS fails.
-
Attacks on LLMNR:
- LLMNR poisoning
- LLMNR flood
Notes: https://tools.ietf.org/html/rfc4795