snmpcheck
SNMP service enumeration tool that enumerates SNMP devices and outputs results in a human-readable format, similar to snmpwalk. Useful for penetration testing or systems monitoring.
Description
snmpcheck is an SNMP device enumerator designed to scan and gather detailed information from target hosts via SNMP protocols. It retrieves system details such as hostname, description, contact, location, uptime, and system date, along with network information, interfaces, IP addresses, routing, TCP connections, listening ports, and more. The output is formatted for easy readability, making it accessible for quick analysis.
In penetration testing scenarios, snmpcheck helps identify exposed SNMP services using default or known community strings, potentially revealing sensitive network configurations. For systems monitoring, it provides a structured view of device status and connectivity. The tool supports SNMPv1 and SNMPv2c, with options to customize port, community, version, and other parameters.
It operates by connecting to the target SNMP service and systematically querying various OIDs to compile comprehensive enumeration data.
How It Works
snmpcheck connects to the target host on SNMP port 161 using specified community string and version (v1 or v2c). It performs enumeration by querying SNMP OIDs for system information, network details, interfaces, IP addresses, routing tables, TCP/UDP listening ports, and connections. Output is organized into readable sections; write access detection and TCP enumeration are optional.
Installation
sudo apt install snmpcheckFlags
Examples
snmp-check 192.168.1.2 -c publicsnmp-check 192.168.1.2snmp-check 192.168.1.2 -c privatesnmp-check 192.168.1.2 -v 2c -c publicsnmp-check 192.168.1.2 -p 1161 -c publicsnmp-check 192.168.1.2 -w -c publicsnmp-check 192.168.1.2 -d -c public