SNMP

The following MIB values correspond to specific Microsoft Windows SNMP parameters

scanning for open snmp ports

onesixtyone

• a tool that will check for given community strings against an IP list, allowing us to brute force various community strings

• In this way onesixtyone is able to scan your target network for SNMP servers

snmpwalk

• a tool to probe and query SNMP values.

• requires that we at least know the SNMP read-only community string

  • this string is usually "public"

snmp-check

• snmp-check allows you to enumerate the SNMP devices and places the output in a very human readable friendly format. It could be useful for penetration testing or systems monitoring.

Checking if write access is permitted

snmp-check -c <community string> -v <snmp version> -w <ip address>

e.g.

snmp-check -c public -v2c -w 10.10.10.92