Files
CyberStrikeAI/tools/responder.yaml
2025-11-21 23:20:41 +08:00

86 lines
2.2 KiB
YAML
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
name: "responder"
command: "python3"
args:
- "-c"
- |
import shlex
import subprocess
import sys
import time
interface = sys.argv[1] if len(sys.argv) > 1 else "eth0"
analyze = sys.argv[2].lower() == "true" if len(sys.argv) > 2 else False
wpad = sys.argv[3].lower() == "true" if len(sys.argv) > 3 else True
fingerprint = sys.argv[4].lower() == "true" if len(sys.argv) > 4 else False
duration = int(sys.argv[5]) if len(sys.argv) > 5 and sys.argv[5] else 300
extra = sys.argv[6] if len(sys.argv) > 6 else ""
cmd = ["responder", "-I", interface]
if analyze:
cmd.append("-A")
if wpad:
cmd.append("-w")
if fingerprint:
cmd.append("-f")
if extra:
cmd.extend(shlex.split(extra))
proc = subprocess.Popen(cmd)
try:
if duration > 0:
time.sleep(duration)
proc.terminate()
proc.wait(timeout=10)
else:
proc.wait()
except KeyboardInterrupt:
proc.terminate()
proc.wait(timeout=10)
enabled: true
short_description: "LLMNR/NBT-NS/MDNS投毒和凭据收集工具"
description: |
封装 Responder支持自动在指定持续时间后停止进程避免占用网络。
parameters:
- name: "interface"
type: "string"
description: "网络接口(-I"
required: false
default: "eth0"
position: 0
format: "positional"
- name: "analyze"
type: "bool"
description: "仅分析模式(-A"
required: false
default: false
position: 1
format: "positional"
- name: "wpad"
type: "bool"
description: "启用WPAD恶意代理-w"
required: false
default: true
position: 2
format: "positional"
- name: "fingerprint"
type: "bool"
description: "指纹识别模式(-f"
required: false
default: false
position: 3
format: "positional"
- name: "duration"
type: "int"
description: "运行持续时间0表示直到手动停止"
required: false
default: 300
position: 4
format: "positional"
- name: "additional_args"
type: "string"
description: "额外的Responder参数直接追加"
required: false
default: ""
position: 5
format: "positional"