Howlsec
HOWLSEC
offensive security
Back to Port Tracker
📊

SNMP

Port 161Misc

Simple Network Management Protocol — brute community strings, then walk the MIB.

// methodology checklist

Step-by-step commands

1

Community string brute

howlsec@kali·shell
onesixtyone -c /usr/share/seclists/Discovery/SNMP/common-snmp-community-strings.txt $t
howlsec@kali·shell
nmap -sU -p161 --script snmp-brute $t
2

MIB walking

howlsec@kali·shell
snmpwalk -v2c -c public $t
howlsec@kali·shell
snmpwalk -v2c -c public $t 1.3.6.1.4.1.77.1.2.25   # users
howlsec@kali·shell
snmpwalk -v2c -c public $t 1.3.6.1.2.1.25.4.2.1.2   # processes