2. SNMP Enumeration

SNMP (Simple Network Management Protocol) uses UDP (User Datagram Protocol) as its transport protocol, and it typically communicates over two well-known ports: UDP 161 and UDP 162.

1. SNMP Enumeration using snmp-check

First scan the target to check open port and then enumerate it using snmp-check

sudo nmap -sU -sV -p [Target IP Address]
snmp-check [Target IP Address]

2. SNPWALK

snmpwalk -v1 -c public [Target IP Address] # snmp version 1
snmpwalk -v2c -c public [Target IP Address] # snmp version 2

3. SNMP Enumeration using NMAP

sudo nmap -sU -P 161 --script snmp-sysdesc [Target IP Address]
sudo nmap -sU -P 161 --script snmp-processes [Target IP Address]
sudo nmap -sU -P 161 --script snmp-win32-software [Target IP Address] # List processes running on windows servers
sudo nmap -sU -P 161 --script snmp-interfaces [Target IP Address]