SNMP enumeration


bash

# MIB tree is information tree about net management
# comunity strings: public private manager


# nmap scan
sudo nmap -sU --open -p 161 192.168.50.1-254 -OG open-snmp.txt

# onesixtyone (with community strings community.txt)
for ip in $(seq 1 254); do echo 192.168.50.$ip; done; > ips
onesixtyone -c community.txt -i ips

# snmpwalk
snmpwalk -c public -v1 -t 10 192.168.50.151
# output has OID MIB tree info

# query specific OID
snmpwalk -c public -v1 192.168.50.151 1.3.6.1.4.1.77.1.2.25

## OID contains user list, processes list, open ports list...




powershell