In-Depth Notes on SNMP, Network Scanning, and Vulnerabilities

Introduction

• Review of class conducted with a friendly greeting.

SNMP (Simple Network Management Protocol)

• SNMP service configuration and management in Windows 7.
• Steps for enabling SNMP:
  • Go to Control Panel → Administrative Tools → Services.
  • Locate SNMP service and set it to start automatically.
• Default port for SNMP is $161$.
• Utilize commands in the terminal such as:
  • sudo snmpwalk -v1 -c public 192.168.0.1 (substitute the IP address accordingly)

TTL (Time to Leave)

• Definition: TTL is the time a packet is allowed to exist in a network before being discarded.
• Default TTL value in various systems:
  • Windows 128, Linux 64.
• Allows control of how long packets will take before expiring.
• Connection and response insights based on TTL values.

Network Scanning and Enumeration

• Focus on several scanning tools and ports:
  • Example ports: $139$ and $445$ for NetBIOS.
• NETBIOS enumeration can be executed using tools like NBTscan and Nmap:
  • Nmap examples:
  • nmap -sS -p139,445 <target> for identifying services.

NFS (Network File System)

• NFS operations and commands:
  • Commands to share files over NFS:
  • showmount -e to display shared directories.
  • NFS Ports: $2046$, $2049$ (for various NFS operations).
• Installation of common NFS utilities:
  • apt install nfs-common

File Transfer and Security

• Discussed FTP (File Transfer Protocol) services:
  • Command to connect to FTP: ftp <IP> and utilize anonymous login if allowed.
  • Mention of VSFTPD 2.3.4 backdoor vulnerability.
• Importance of enumerating and assessing services to check for vulnerabilities.

MySQL Vulnerabilities

• MySQL port default is $3306$.
• Commands to find and exploit in a structured way:
  • Example attack structure: use auxiliary/scanner/mysql/mysql_login with appropriate credentials.
• Utilize enumeration techniques to reveal credentials and access info.

Conclusion

• Emphasized the necessity of understanding which services are available for successful network enumeration.
• Closing with encouragement for further exploration and study on network security.