Hack Like a Pro: How to Crack Private & Public SNMP Passwords Using Onesixtyone « Null Byte :: WonderHowTo

Welcome back, my novice hackers!In a recent tutorial, I showedhow the SNMP protocol can be a gold mineof information forreconnaissanceon a potential target. If you haven't already, I strongly suggest that youread itbefore progressing here, as little of this will make much sense without that background.Cracking SNMP Passwords with OnesixtyoneThe MIB database, created by SNMP, contains extensive information on every device on the network. While SNMPv1 is very insecure and SNMPv3 is very secure, many companies still use SNMPv1. As such, the community public string (password) that provides access to SNMP and its MIB database is susceptible to cracking. Once the hacker has the SNMP community public string, they have access to all the info available in the SNMP MIB.Better yet, if we can crack theprivatecommunity string (password), we can change the settings on any network device—even take it off line. We could then potentially change the configuration settings on switches and routers to our advantage.In this tutorial, we will be cracking the SNMPv1 community string (password) with one of the best SNMP cracking tools,onesixtyone(SNMP runs on port 161, hence its name).Step 1: Find OnesixtyoneOnesixtyone—like so many of the best hacking tools—is built intoBackTrack, so no need to download and install if you're running BackTrack. We can find onesixtyone by going toBackTrack->Information Gathering->Network Analysis->SNMPand thenonesixtyone, as shown in the screenshot below.Image viawonderhowto.comStep 2: Open OnesixtyoneWhen we click on onesixtyone, we will be greeted with a screenshot like that below.Notice in the third line that the basic syntax for usage of onesixtyone.onesixtyone (options) <host> <community>Where:hostis the IP address of the system we are targetingcommunityis either public or privateLike any password-cracking software (that is not using brute-force), it's only as good as its wordlist. Onesixtyone comes with a built-in wordlist of commonly used passwords on SNMP, but if your password isn't in the list, you can use any word list you want.Very often, if a sysadmin changes the SNMP community string, they will change it to something simple like thecompanyname-publicorcompanyname-private. It's always worth trying these or similar combinations before attempting a password crack.Step 3: Take It Out for SpinNow that we understand the basics of how onesixtyone works, let try it out../onesixtyone -c dict.txt 192.168.1.119Now, all we need to do is hit enter and let onesixtyone do its job!When using the built-in wordlist dict.txt, onesixtyone finishes its work in short order. Obviously, with longer word lists, this process can be more time consuming. To use another word list, simply replace the dict.txt with the full path to the file, such as:./onesixtyone -c /root/anotherwordlist 192.168.1119 publicAs you can see, onesixtyone was able to find the both the public and private community strings. The network administrator left both strings at their default values, which is common.Other possible sources for potential word lists can be foundhere, among other places on the web, and some are as big as 50g!Keep coming back for more adventures inHackerland!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicensePassword keyimage via ShutterstockRelatedHack Like a Pro:How to Exploit SNMP for ReconnaissanceNews:How to Study for the White Hat Hacker Associate Certification (CWA)Hack Like a Pro:How to Grab & Crack Encrypted Windows PasswordsHack Like a Pro:How to Crack Passwords, Part 1 (Principles & Technologies)Hack Like a Pro:How to Crack Passwords, Part 2 (Cracking Strategy)How To:Crack WPA & WPA2 Wi-Fi Passwords with PyritHack Like a Pro:Metasploit for the Aspiring Hacker, Part 8 (Setting Up a Fake SMB Server to Capture Domain Passwords)Hack Like a Pro:How to Hack Facebook (Facebook Password Extractor)Hack Like a Pro:How to Crack User Passwords in a Linux SystemHow to Hack Wi-Fi:Selecting a Good Wi-Fi Hacking StrategyHack Like a Pro:How to Remotely Grab Encrypted Passwords from a Compromised ComputerHow To:Hack LAN passwords with EttercapHow To:You Can Easily Hack Instagram for a Crazy Amount of Likes (But You Totally Shouldn't)News:8 Tips for Creating Strong, Unbreakable PasswordsHack Like a Pro:How to Crack Passwords, Part 4 (Creating a Custom Wordlist with Crunch)Advice from a Real Hacker:How to Create Stronger PasswordsHow To:Recover Passwords for Windows PCs Using OphcrackHow To:Creating Unique and Safe Passwords, Part 1 Using WordlistsHack Like a Pro:How to Crack Passwords, Part 5 (Creating a Custom Wordlist with CeWL)Hack Like an Elite:Batch Scripting for Malicious Purposes: PART 4 (Final) (Protection Using Batch)How to Hack Wi-Fi:Cracking WPA2-PSK Passwords with CowpattyHow To:How Hackers Take Your Encrypted Passwords & Crack ThemMastering Security, Part 1:How to Manage and Create Strong PasswordsNews:Advanced Cracking Techniques, Part 2: Intelligent BruteforcingNews:Advanced Cracking Techniques, Part 1: Custom DictionariesHow To:GPU Accelerate Cracking Passwords with HashcatRainbow Tables:How to Create & Use Them to Crack PasswordsNews:Should district be allowed to demand middle-schooler's Facebook password?Hide Your Secrets:How to Password-Lock a Folder in Windows 7 with No Additional SoftwareHow To:Hack Mac OS X Lion PasswordsHow To:Safely Log In to Your SSH Account Without a PasswordHow To:Recover WinRAR and Zip PasswordsGoodnight Byte:Coding a Web-Based Password Cracker in PythonHow To:Recover a Windows Password with OphcrackHow To:Create Strong, Safe PasswordsNews:Understanding Modern Cryptography: Public KeysCommunity Byte:Coding a Web-Based Password Cracker in PythonHow To:How Hackers Steal Your Internet & How to Defend Against ItHow To:The Official Google+ Insider's Guide IndexGoodnight Byte:HackThisSite, Realistic 5 - Real Hacking Simulations