Internal Infrastructure Pentest - LLMNR

less than 1 minute read

  • LLMNR (Link Local Multicast Name Rsolution): The Link-Local Multicast Name Resolution (LLMNR) is a protocol based on the Domain Name System (DNS) packet format that allows both IPv4 and IPv6 hosts to perform name resolution for hosts on the same local link.

    • LLMNR allow machines on the same subnet help each other identify hosts when DNS fails.
  • Attacks on LLMNR:

    • LLMNR poisoning
    • LLMNR flood

Notes: https://tools.ietf.org/html/rfc4795