Pentesting SNMP - 161,162

SNMPWALK

snmpwalk -c public -v1 <IP> 1
snmpwalk -c private -v1 <IP> 1
snmpwalk -c manager -v1 <IP> 1

NMAP SCRIPT

nmap -sV -script msrpc-enum -Pn <IP>
nmap -sU -p161 --script "snmp-*" <IP>

RPCCLIENT

rpcclient -U "" -N <IP>

SNMP Enum

kali@kali:~$ echo public > community
kali@kali:~$ echo private >> community
kali@kali:~$ echo manager >> community

kali@kali:~$ for ip in $(seq 1 254); do echo 10.11.1.$ip; done > ips

kali@kali:~$ onesixtyone -c community -i ips
Scanning 254 hosts, 3 communities
10.11.1.14 [public] Hardware: x86 Family 6 Model 12 Stepping 2 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.1 (Build 2600 Uniprocessor Free)
10.11.1.13 [public] Hardware: x86 Family 6 Model 12 Stepping 2 AT/AT COMPATIBLE - Software: Windows 2000 Version 5.1 (Build 2600 Uniprocessor Free)
10.11.1.22 [public] Linux barry 2.4.18-3 #1 Thu Apr 18 07:37:53 EDT 2002 i686
...