Script llmnr-resolve

Script types: prerule
Categories: discovery, safe, broadcast
Download: https://svn.nmap.org/nmap/scripts/llmnr-resolve.nse

Script Summary

Resolves a hostname by using the LLMNR (Link-Local Multicast Name Resolution) protocol.

The script works by sending a LLMNR Standard Query containing the hostname to the 5355 UDP port on the 224.0.0.252 multicast address. It listens for any LLMNR responses that are sent to the local machine with a 5355 UDP source port. A hostname to resolve must be provided.

For more information, see:

• http://technet.microsoft.com/en-us/library/bb878128.aspx

Script Arguments

llmnr-resolve.timeout

Max time to wait for a response. (default 3s)

llmnr-resolve.hostname

Hostname to resolve.

max-newtargets, newtargets

See the documentation for the target library.

Example Usage

nmap --script llmnr-resolve --script-args 'llmnr-resolve.hostname=examplename' -e wlan0

Script Output

Pre-scan script results:
| llmnr-resolve:
|   acer-PC : 192.168.1.4
|_  Use the newtargets script-arg to add the results as targets

Requires

• nmap
• stdnse
• table
• packet
• ipOps
• target
• math
• string

---

Author:

• Hani Benhabiles

License: Same as Nmap--See https://nmap.org/book/man-legal.html

prerule

prerule (host, port)

Parameters

host

 

port

 

Usage:

nmap --script llmnr-resolve --script-args 'llmnr-resolve.hostname=examplename' -e wlan0