As I mentioned before, Nmap network mapper is a free and open source utility for network discovery
and security auditing.
Many systems and network administrators also find it useful for tasks such as network inventory, managing
service, upgrade schedules and monitoring, host or service uptime.
So let's analyze the SNP service of our router using Nmap.
So remember in the previous lecture we scanned the TCP ports and we saw that the port TCP 161 was closed,
but we enabled the SNP service in the router with the default values.
So it's supposed to be open.
SNP uses the UDP protocol in general, so we should check the port.
UDP 161 as well.
So let's create another Nmap query.
This time around, we'll use as Capital U to run a UDP scan.
Identify the port scanned by P as a parameter 161 and 162.
As Capital V for version detection and finally the IP address of our router.
Great UDP scans take a little longer than TCP scans in general.
So it took about two minutes and here are the results.
Both UDP port 161 and 162 are open as expected.
Now Nmap has a scripting engine and has a lot of useful scripts that come with the Nmap tool.
By default, the extension of Nmap scripts is nsq.
So let's find a few.
Using the locate Linux command locate star NSC.
Here are the Nmap scripts.
Now I want to filter the scripts written for just the SNP service.
Recall the command, put a pipe type grep SNP and hit enter.
It'll show only the lines which contain SNP as the keyword.
The SNP brute script is to find the community names of the service using the brute force attack.
So let's create a new Nmap query to run this script.
Nmap s uppercase U to scan udp ports P161 to scan the port 161 IP address of the router.
Script to run the script.
And finally the name of the script.
SNMp Brute.
And here's the result.
Nmap found two community names, public and private.
That's just perfect.