What is SNMP?
SNMP (Simple Network Management Protocol) lets network devices share status and metrics.
Common security issues
Default community strings (
public,private).SNMPv1/v2 no encryption.
Info disclosure.
Write access abuse.
Default ports
161
162
Enumeration
Brute force communities, enumerate system info, and walk OIDs
SNMP Community String Brute Forcing
Brute force SNMP community strings using tools like onesixtyone and Hydra to gain unauthorised read/write access to network device configurations.
SNMP Targeted OID Enumeration
Vulnerability Discovery
Test SNMP community strings and write access for RCE paths
SNMP Default and Weak Community Strings
Enumerate SNMP services for default or weak community strings (public/private) using brute-force tools to gain unauthorised read/write access to network devices.
SNMP Write-Enabled Community String
Identifies SNMP community strings with write access enabled, allowing attackers to modify device configurations, routing tables, and system settings remotely.
Exploitation
Guides on exploiting SNMP write access for RCE via MIB extensions
SNMP Write Abuse – RCE via NET-SNMP-EXTEND-MIB
Exploit SNMP write access to inject arbitrary commands via NET-SNMP-EXTEND-MIB, achieving remote code execution on misconfigured SNMP agents.