[NSE] llmnr-resolve.nse

[Hani Benhabiles <kroosec () gmail com>]

Hi list,

description = [[
Resolves a hostname by using the LLMNR (Link-Local Multicast Name 
Resolution) protocol.

The script works by sending a LLMNR Standard Query containing the 
hostname to
the 5355 UDP port on the 224.0.0.252 multicast address. It listens for any
LLMNR responses that are sent to the local machine with a 5355 UDP 
source port.

For more information, see:
    * http://technet.microsoft.com/en-us/library/bb878128.aspx
]]

---
-- @args broadcast-igmp-discovery.hostname Hostname to resolve.
--
-- @args broadcast-igmp-discovery.timeout Max time to wait for a response.
--
-- @args broadcast-igmp-discovery.interface Network interface to use.
--
--@usage
-- nmap --script llmnr-resolve -e wlan0
--
--@output
--
--Pre-scan script results:
--| llmnr-query:
--|_  acer-PC : 192.168.1.4
--


Feedbacks and testing are welcome.

Cheers,
Hani.

--
Hani Benhabiles

Twitter: https://twitter.com/#!/kroosec
Blog: http://kroosec.blogspot.com

Attachment: llmnr-resolve.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/