snmpwalk -v 2c -c public 10.129.42.253 1.3.6.1.2.1.1.5.0
iso.3.6.1.2.1.1.5.0 = STRING: "gs-svcscan"SNMP
| Command | Description |
|---|---|
snmpwalk -v2c -c <community string> <FQDN/IP> | Querying OIDs using snmpwalk. |
onesixtyone -c community-strings.list <FQDN/IP> | Bruteforcing community strings of the SNMP service. |
braa <community string>@<FQDN/IP>:.1.* | Bruteforcing SNMP service OIDs. |
Look up OID’s
https://www.alvestrand.no/objectid/
SNMPwalk
mstrkoffee@htb[/htb]$ snmpwalk -v2c -c public 10.129.14.128
OneSixtyOne
mstrkoffee@htb[/htb]$ sudo apt install onesixtyone
mstrkoffee@htb[/htb]$ onesixtyone -c /opt/useful/SecLists/Discovery/SNMP/snmp.txt 10.129.14.128
Scanning 1 hosts, 3220 communities
10.129.14.128 [public] Linux htb 5.11.0-37-generic #41~20.04.2-Ubuntu SMP Fri Sep 24 09:06:38 UTC 2021 x86_64Braa
mstrkoffee@htb[/htb]$ sudo apt install braa
mstrkoffee@htb[/htb]$ braa <community string>@<IP>:.1.3.6.* # Syntax
mstrkoffee@htb[/htb]$ braa [email protected]:.1.3.6.*