Skip to content
HackIndex logo

HackIndex

SNMP Targeted OID Enumeration

1 min read Jan 4, 2026

Targeted walks extract precise details. Use v2c bulk for speed on large responses.

Info 

OID

System info

1.3.6.1.2.1.1

Network interfaces

1.3.6.1.2.1.2.2.1.2

Running processes

1.3.6.1.2.1.25.4.2.1.2

Installed software

1.3.6.1.2.1.25.6.3.1.2

Windows user accounts

1.3.6.1.4.1.77.1.2.25

TCP connections

1.3.6.1.2.1.6.13.1.1

System and Host Details

Basic system MIB:

┌──(kali㉿kali)-[~]
└─$ snmpbulkwalk -v2c -c public $TARGET_IP 1.3.6.1.2.1.1

Pulls description, uptime, contact, hostname. Version and OS hints guide fingerprinting.

Windows User Accounts

Microsoft user OID:

┌──(kali㉿kali)-[~]
└─$ snmpwalk -v2c -c public $TARGET_IP 1.3.6.1.4.1.77.1.2.25

Lists local usernames on Windows hosts. Valid accounts feed credential attacks.

Running Processes and Software

Processes:

┌──(kali㉿kali)-[~]
└─$ snmpwalk -v2c -c public $TARGET_IP 1.3.6.1.2.1.25.4.2.1.2

Paths and names reveal services or vulnerabilities.

Installed software:

┌──(kali㉿kali)-[~]
└─$ snmpwalk -v2c -c public $TARGET_IP 1.3.6.1.2.1.25.6.3.1.2

Package names and versions for patching gaps.

Network Interfaces and Connections

Interfaces:

┌──(kali㉿kali)-[~]
└─$ snmpwalk -v2c -c public $TARGET_IP 1.3.6.1.2.1.2.2.1.2

Descriptions and IPs; leaks internal networks.

TCP connections:

┌──(kali㉿kali)-[~]
└─$ snmpwalk -v2c -c public $TARGET_IP 1.3.6.1.2.1.6.13.1.1

Local/remote ports and IPs map listening services.

Routing table:

┌──(kali㉿kali)-[~]
└─$ snmpwalk -v2c -c public $TARGET_IP 1.3.6.1.2.1.4.21.1

Internal routes expose network topology.

Fallback to v1 if v2c rejected:

┌──(kali㉿kali)-[~]
└─$ snmpwalk -v1 -c public $TARGET_IP <OID>

References