Nothink!

Snmpcheck

Snmpcheck is an open source tool distributed under GPL license. Its goal is to automate the process of gathering information of any devices with SNMP protocol support (Windows, Unix-like, network appliances, printers...). Like to snmpwalk, snmpcheck allows you to enumerate the SNMP devices and places the output in a very human readable friendly format. It could be useful for penetration testing or systems monitoring.

Features

snmpcheck supports the following enumerations:

contact
description
detect write access
devices
domain
hardware and storage informations
hostname
IIS statistics
IP forwarding
listening UDP ports
location
motd
mountpoints
network interfaces
network services
processes (glance at parameters!)
routing information
software components
system uptime
TCP connections
total memory
uptime
user accounts

About printers enumeration:

filename
username
client
timestamp
domain
application name
application command

Download

Version	Link
1.9 (2015/06/29)	snmpcheck-1.9.rb
1.8 (2011/01/23)	snmpcheck-1.8.pl
Metasploit module	snmp_enum

* snmpcheck is installed on Kali Linux by default.

Report examples

Requirements for snmpcheck-1.9.rb

Notes

if the enumeration is very slow, disable the TCP enum with --disable_tcp;
target_list=`sort target_list|uniq `; for target in $target_list; do ./snmpcheck-1.9.rb -d $target | tee -a snmp_log.txt; done
nmap -sU --script snmp-brute 'target' [--script-args snmp-brute.communitiesdb='wordlist'
masscan 0.0.0.0/0 -pU:161 --banners
zmap -o zmap-snmp.txt -M udp -p 161 -P 1 -B 1M --probe-args=file:/home/zmap/examples/udp-probes/snmp1_161.pkt 10.60.0.0/19 172.20.0.0/16
snmpscan --randomize --threads 100 --timeout 2 --community public --target 192.168.0.0/24

References

Contribute

Snmpcheck is an open-source project, thus, welcoming contributions.

Disclaimer

Snmpcheck should not be used against machines you do not own or administrator. This tool might create IDS warnings. The author can't be held responsible for the use and/or misuse of this program.