Responder
E192910
Responder is a network analysis and credential-harvesting tool commonly used in penetration testing to capture and manipulate authentication traffic on local networks.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Responder canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T1717797 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Responder Context triple: [Kali Linux, includesTool, Responder]
-
A.
RE
RE is the common abbreviation for the British Army’s Corps of Royal Engineers, responsible for military engineering and technical support.
-
B.
RE
RE is the abbreviation for RegioExpress, a category of regional express trains commonly used in European rail transport.
-
C.
RE
RE is the two-letter ISO 3166-1 alpha-2 country code assigned to the French overseas department and region of Réunion.
-
D.
Ren
Ren is a central character in Margaret Atwood’s dystopian MaddAddam trilogy, known for her experiences as a sex worker and survivor in a bioengineered, post-apocalyptic world.
-
E.
Repre
Repre is the popular nickname for the Slovakia men's national ice hockey team, used by fans and media to refer to the national squad.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Responder Target entity description: Responder is a network analysis and credential-harvesting tool commonly used in penetration testing to capture and manipulate authentication traffic on local networks.
-
A.
RE
RE is the common abbreviation for the British Army’s Corps of Royal Engineers, responsible for military engineering and technical support.
-
B.
RE
RE is the abbreviation for RegioExpress, a category of regional express trains commonly used in European rail transport.
-
C.
RE
RE is the two-letter ISO 3166-1 alpha-2 country code assigned to the French overseas department and region of Réunion.
-
D.
Ren
Ren is a central character in Margaret Atwood’s dystopian MaddAddam trilogy, known for her experiences as a sex worker and survivor in a bioengineered, post-apocalyptic world.
-
E.
Repre
Repre is the popular nickname for the Slovakia men's national ice hockey team, used by fans and media to refer to the national squad.
- F. None of above. chosen
Statements (50)
| Predicate | Object |
|---|---|
| instanceOf |
credential harvesting tool
ⓘ
network analysis tool ⓘ open-source software ⓘ penetration testing tool ⓘ |
| canBeUsedFor |
Active Directory environment testing
ⓘ
internal network assessments ⓘ |
| canCapture |
NTLMv1 hashes
ⓘ
NTLMv2 hashes ⓘ cleartext credentials in some protocols ⓘ |
| category |
credential capture tool
ⓘ
network spoofing tool ⓘ red team toolkit component ⓘ |
| domain |
Windows network security
ⓘ
network security ⓘ Offensive Security ⓘ
surface form:
offensive security
|
| implementsAttack |
HTTP authentication capture
ⓘ
LLMNR poisoning ⓘ MDNS poisoning ⓘ NBT-NS poisoning ⓘ NetNTLM hash capture ⓘ SMB authentication capture ⓘ WPAD spoofing ⓘ credential relay support ⓘ |
| license |
GNU General Public License
ⓘ
surface form:
GPLv3
|
| maintainedBy | community contributors ⓘ |
| recommendedUse | authorized penetration testing only ⓘ |
| requires | network interface in promiscuous or listening mode ⓘ |
| risk | can be abused by attackers on misconfigured networks ⓘ |
| runsOn |
Linux
ⓘ
Windows ⓘ macOS ⓘ |
| supportsProtocol |
DNS
ⓘ
FTP ⓘ HTTP ⓘ HTTPS ⓘ LDAP ⓘ LLMNR ⓘ MDNS ⓘ NBT ⓘ
surface form:
NBT-NS
SMB ⓘ |
| typicalUser |
penetration tester
ⓘ
red team operator ⓘ security researcher ⓘ |
| usedFor |
NTLM hash capture
ⓘ
capturing authentication traffic on local networks ⓘ credential harvesting during penetration tests ⓘ manipulating authentication traffic on local networks ⓘ network protocol poisoning ⓘ relay attack preparation ⓘ |
| writtenInLanguage | Python ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Responder Description of subject: Responder is a network analysis and credential-harvesting tool commonly used in penetration testing to capture and manipulate authentication traffic on local networks.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.