{
	"id": "b7883a1d-edc7-4718-9ad8-5a99c98d6497",
	"created_at": "2026-04-06T00:20:01.895202Z",
	"updated_at": "2026-04-10T13:11:34.295147Z",
	"deleted_at": null,
	"sha1_hash": "8b0383d21fe0691731d2197621bfb2586be26730",
	"title": "GitHub - Kevin-Robertson/Conveigh: Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 40298,
	"plain_text": "GitHub - Kevin-Robertson/Conveigh: Conveigh is a Windows\r\nPowerShell LLMNR/NBNS spoofer detection tool\r\nBy Kevin-Robertson\r\nArchived: 2026-04-05 14:15:16 UTC\r\nConveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool.\r\nFunction\r\nInvoke-Conveigh\r\nThe main Conveigh LLMNR/NBNS spoofer detection function.\r\nPrivilege Requirements:\r\nElevated Administrator shell\r\nFeatures:\r\nGenerates and sends IPv4 LLMNR/NBNS requests with random or set hostnames\r\nDetects responses to sent IPv4 LLMNR/NBNS requests using a packet sniffer\r\nOptionally displays all received IPv4 LLMNR/NBNS requests using a packet sniffer\r\nFile output\r\nRun time control\r\nParameters:\r\nCaptureRequests - Default = Disabled: (Y/N) Enable/Disable displaying and logging all received\r\nLLMNR/NBNS requests.\r\nIP - Specify a specific local IP address for listening. This IP address will also be used for LLMNR/NBNS\r\nspoofing if the 'SpooferIP' parameter is not set.\r\nHostnames - Array of hostnames that will be randomly selected for LLMNR/NBNS requests. Hostnames\r\nmust meet NBNS hostname requirements. If this parameter is not used, hostnames will be randomly\r\ngenerated.\r\nMaxSendRequestTime - Default = 30 Minutes: Set the maximum random time in minutes for sending\r\nLLMNR/NBNS requests.\r\nFileOutput - Default = Disabled: (Y/N) Enable/Disable real time file output.\r\nOutputDir - Default = Working Directory: Set a valid path to an output directory for log and capture files.\r\nFileOutput must also be enabled.\r\nRunTime - Default = Unlimited: (Integer) Set the run time duration in minutes.\r\nhttps://github.com/Kevin-Robertson/Conveigh\r\nPage 1 of 2\n\nSystem Requirements\r\nTested minimums are PowerShell 2.0 and .NET 3.5\r\nUsage\r\nTo import with Import-Module:\r\nImport-Module ./Conveigh.ps1\r\nTo import using dot source method:\r\n. ./Conveigh.ps1\r\nExamples\r\nTo execute with default settings:\r\nInvoke-Conveigh\r\nTo import and execute with one line:\r\nImport-Module ./Conveigh.ps1;Invoke-Conveigh\r\nTo execute with parameters:\r\nInvoke-Conveigh -Hostnames host1,host2,host3 -RunTime 8\r\nSource: https://github.com/Kevin-Robertson/Conveigh\r\nhttps://github.com/Kevin-Robertson/Conveigh\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://github.com/Kevin-Robertson/Conveigh"
	],
	"report_names": [
		"Conveigh"
	],
	"threat_actors": [],
	"ts_created_at": 1775434801,
	"ts_updated_at": 1775826694,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/8b0383d21fe0691731d2197621bfb2586be26730.pdf",
		"text": "https://archive.orkl.eu/8b0383d21fe0691731d2197621bfb2586be26730.txt",
		"img": "https://archive.orkl.eu/8b0383d21fe0691731d2197621bfb2586be26730.jpg"
	}
}