detect-responder | repo contains a python-based extension

detect-responder is a Python library. detect-responder has no bugs, it has no vulnerabilities and it has low support. However detect-responder build file is not available. You can download it from GitHub.

This repo contains a python-based extension for osquery to detect active instances of Responder or any NBT-NS and LLMNR spoofers/poisoners on the network. This extension was developed using osquery's Python bindings from This extension was written with native Python modules to reduce the need for installing third-party Python libraries on hosts. Although it would have been cleaner and easier to use a library like Scapy, it would require installing it on every host where the extension was used. Although many similar tools exist, most of them exist as independent scripts. This extension can take advantage of an existing osquery deployment and can provide network coverage everywhere that you have an osquery agent installed. Note: This extension has not been tested on production networks and exists only as a proof-of-concept.