Claim

Tinker Secor USES Responder

Tinker ran Responder to induce systems on the local subnet to disclose Net-NTLM authentication hashes.

Episode
EP 36 — Jeremy from Marketing
Origin
Explicit
Confidence
99% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
—

Transcript evidence

“The next day he comes in, fires up Responder”

Jack Rhysider · offsets 18827–18871

“I will run Responder twice a day”

Tinker Secor · offsets 21279–21311

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:38:56.137273+00:00

claim:ep036:79816bbeab70