From cae9ff7a8d09f3398772875ce9de4dc064038396 Mon Sep 17 00:00:00 2001 From: Kevin Robertson Date: Wed, 14 Sep 2016 20:06:15 -0400 Subject: LLMNR learning fix Fixed a bad if statement that was preventing Inveigh from sending out LLMNR requests with SpooferLearning enabled. --- Scripts/Inveigh.ps1 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Scripts/Inveigh.ps1 b/Scripts/Inveigh.ps1 index 8c7437f..716f9da 100644 --- a/Scripts/Inveigh.ps1 +++ b/Scripts/Inveigh.ps1 @@ -1775,7 +1775,7 @@ $sniffer_scriptblock = if($LLMNR -eq 'Y') { - if($SpooferLearning -eq 'Y' -and $inveigh.valid_host_list -contains $LLMNR_query_string -and $source_IP -ne $IP) + if($SpooferLearning -eq 'Y' -and $inveigh.valid_host_list -notcontains $LLMNR_query_string -and $source_IP -ne $IP) { if(($LLMNR_learning_log.Exists({param($s) $s -like "20* $LLMNR_query_string"}))) -- cgit v1.2.3