161-162-10161-10162-snmp.md

description
Simple Network Management Protocol (SNMP) is a protocol that is used to monitor different devices in the network.

👷 161, 162, 10161, 10162/SNMP

• Access critical information about target system.

Nmap (SNMP NSE Script):

nmap -p 161 <IP> --script snmp*

snmp-check:

snmp-check <IP>

snmpwalk:

snmpwalk -c public -v1 $ip 1.3.6.1.4.1.77.1.2.25 # enumerate windows users
snmpwalk -c public -v1 $ip 1.3.6.1.2.1.25.4.2.1.2 # enumerates running processes

SNMP MIB Trees:

1.3.6.1.2.1.25.1.6.0 - System Processes

1.3.6.1.2.1.25.4.2.1.2 - Running Programs

1.3.6.1.2.1.25.4.2.1.4 - Processes Path

1.3.6.1.2.1.25.2.3.1.4 - Storage Units

1.3.6.1.2.1.25.6.3.1.2 - Software Name

1.3.6.1.4.1.77.1.2.25 - User Accounts

1.3.6.1.2.1.6.13.1.3 - TCP Local Ports

Tools:

snmp-check

snmpwalk

nmap