1
00:00:00,340 --> 00:00:00,760
Now.

2
00:00:00,760 --> 00:00:06,400
I just wouldn't be me if I didn't show you another way to collect information from the SNP service.

3
00:00:06,700 --> 00:00:10,960
So let's have a look at the SNP check command line tool.

4
00:00:11,620 --> 00:00:19,570
SNP check allows you to enumerate the SNP devices and places the output in a very human readable, friendly

5
00:00:19,570 --> 00:00:20,390
format.

6
00:00:20,410 --> 00:00:24,310
It could be useful for penetration testing or systems monitoring.

7
00:00:25,760 --> 00:00:29,450
So here we are in Cali again with a terminal screen.

8
00:00:29,450 --> 00:00:36,740
If you write SNMp and hit tab twice, you see the Cali commands which start with SNMp.

9
00:00:38,030 --> 00:00:41,090
So this is our command SNMp check.

10
00:00:41,390 --> 00:00:43,790
Let's look at the manual of the command first.

11
00:00:43,790 --> 00:00:49,640
So type man SNMp check and hit enter to access a manual page.

12
00:00:50,210 --> 00:00:51,440
Name the command.

13
00:00:52,270 --> 00:00:55,450
An options p to identify port.

14
00:00:58,030 --> 00:01:00,040
See to identify community.

15
00:01:01,660 --> 00:01:04,330
W to detect, write, access, all that.

16
00:01:04,930 --> 00:01:08,380
And of course you can exit the manual by pressing Q.

17
00:01:09,110 --> 00:01:10,790
Okay, so let's build a command.

18
00:01:11,750 --> 00:01:12,980
SNP check.

19
00:01:14,340 --> 00:01:18,810
We don't need to identify the port because it's already 161 by default.

20
00:01:19,870 --> 00:01:21,880
See to identify community.

21
00:01:22,270 --> 00:01:25,900
Now we know that our router has two communities, public and private.

22
00:01:26,460 --> 00:01:29,850
Let's look at the right privilege of the private community.

23
00:01:30,060 --> 00:01:32,760
And finally, the IP address of our router.

24
00:01:38,000 --> 00:01:40,270
The result output is very long.

25
00:01:40,280 --> 00:01:42,560
It's the configuration of the router.

26
00:01:43,280 --> 00:01:46,730
So let's scroll up to see the first lines of the result set.

27
00:01:47,180 --> 00:01:50,690
Okay, so here is the write access check result.

28
00:01:50,960 --> 00:01:55,880
And as you can see here, the private community is write access permitted.

29
00:01:57,390 --> 00:01:59,280
What else do we have in the output?

30
00:01:59,490 --> 00:02:00,990
System information.

31
00:02:02,270 --> 00:02:04,440
Network information.

32
00:02:04,460 --> 00:02:07,430
The status of the switch ports of the router.

33
00:02:09,669 --> 00:02:10,970
Network IPS.

34
00:02:12,830 --> 00:02:13,970
The routing table.

35
00:02:15,750 --> 00:02:18,480
And the list of open UDP ports.