---
id: 8273
title: "Identifying Rogue NBNS Spoofers"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/identifying-rogue-nbns-spoofers/"
published_at: "2013-09-05T00:00:00Z"
tags: ["windows", "detection", "spoofing", "nbns", "responder", "hash-capture", "network-defense"]
phying_url: "https://phying.com/item/8273"
lang: en
---

# Identifying Rogue NBNS Spoofers

## Summary

NBNS spoofing with Responder.py or Metasploit easily captures and relays hashes, yet mitigations are scarce. A new script queries a nonexistent hostname and alerts admins when a spoofer responds.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2013-09-05T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/identifying-rogue-nbns-spoofers/
- **Phying News:** https://phying.com/item/8273