Responder.py and Turtlepower

[GuitarPlayer68]

I decided to try and challenge my lacking python skill and attempt to port over the responder.py tool. Got a copy from git and uploaded it to my turtle, at first run it complained about no sqlite3 python module.

After more digging I opted to update via opkg and install the python sqlite3 module. So far so good right? Responder launches now with a couple of errors and zero captures.

The errors are as follows.

[!] Error starting SSL server on port 443, check permissions or other servers running.

[+] Listening for events...

[!] Error starting TCP server on port 53, check permissions or other servers running.

Now shutting down dnsmasq clears out the 53 error but I can't seem to chase down the 443 issue. A quick lsof doesn't return anything bound to 443 so I'm thinking there is a permissions issue somewhere as it could also be the cause of the lack of any captures. Running responder in verbose mode doesn't get me any more information than what's above.

As I said I lack python as a skill set, I am more of a perl man, so the issue might be python related. I'm at a loss though of where to look next. Does any have any hints or ideas of where I look next?

Thanks!

[dukesecurity]

Try changing permissions on the directory that is mapped to sshfs (ex. chmod 777 /home/turtle). You could also try not starting HTTPS server (disable in Responder config). I have it partially working as I have received NTLMv1 hashes.

[IMcPwn]

Wow. I didn't even realize you posted this, but I made Responder functional with a module: https://github.com/hak5/lanturtle-wiki/pull/8

Currently it is fully functional against the host machine the turtle is plugged into but I'm still working on finding a way to enable it to open those ports to the whole LAN.

[ptrac3]

Hi guys i am trying to configure the responder module on my lan turtle but i am not receiving any hashes even if i connect fo a non existent SMB share from target machine. I can see from responder output that it was poisoned but i am not receiving anything back..Do you guys happen to have some ideas on why this is happening?