Skip to content

snmp

The snmp identity: Simple Network Management Protocol. Every field and what is required.

snmp is the Simple Network Management Protocol (RFC 3411). The target is host:port (default 161). The step sends and receives raw datagram bytes as hex over UDP, and the session persists across steps, so a solution can stage an exchange and continue it.

Fields

snmp uses the byte-session fields from tcp: send, recv, recv_until, timeout, close, and capture. Each send is one datagram and each read returns the next datagram.

Example

snmp baseline
  meaning: a normal SNMPv2c GET for sysDescr.0 with community "public"
  send: 302902010104067075626c6963a01c020401020304020100020100300e300c06082b060102010101000500
  recv: 4096
  assert: contains "4c696e7578"

Write attacks down. Verify them.

Download the binary, point it at a target you own, and get a verified result. The corpus is open and the format is plain text.