Responder
What it’s for
Answers LLMNR, NBT-NS and mDNS requests on a network to capture authentication hashes.
Where it shines
- Often lands a first foothold or hash on internal tests
- Simple to run
Where it falls down
- Very noisy and disruptive
- Can break name resolution on the network if left running
My take
[EDIT ME: your one-line verdict — day-one essential, learn later, or overhyped, in your own words.]