Inveigh

The Responder equivalent for when the foothold is a Windows machine, not Linux. It poisons LLMNR, NBT-NS and mDNS and stands up spoofing listeners (HTTP, SMB, LDAP) to capture NetNTLM hashes from the internal network without leaving the compromised shell. It comes as a PowerShell version (`Invoke-Inveigh`) and a more modern C# binary; both play the same role, useful when there is no direct connectivity from the attacker to the internal segment but there is from the already-compromised host.