Question

During an internal engagement, a penetration tester discovers that several network switches respond to SNMP requests. Using a common read-only community string, the tester wants to pull the full device configuration, interface tables, and running processes to map the network. Which tool and approach will most effectively walk the entire SNMP MIB tree from these devices?

Accepted Answer

Run snmpwalk with the read-only community string against each device to recursively enumerate the OID subtree

Answer

Use snmpset to write new OID values so the device returns its configuration in the response

Answer

Perform an Nmap TCP connect scan on port 161 to retrieve the MIB data in the banner

Answer

Send an ICMP echo sweep to the switches and parse the SNMP data from the reply payload