Re: snmp-ios-config script argument problem
Daniel Miller <[email protected]>
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CABmvJnPpJSSX_o1+TUoRPMxSbNaBVXZaqyh-hw7ho_WfuGbUmA@mail.gmail.com> |
Sorry for the delay in getting this message through to the mailing list. You reported this separately on Github [1], and I believe we satisfactorily resolved it there: 1. Corrected examples in NSEdoc to reflect the creds.snmp script-arg in use for several versions now. 2. Improved snmp.lua's retrieval of credentials to understand strings provided without a ":" separator. Dan [1] https://github.com/nmap/nmap/issues/862 On Thu, Apr 20, 2017 at 9:56 PM, Michael Hubbard < [email protected]> wrote: > I have a question about the snmp-ios-config script. > > I have been using it for a couple years with great success but I ran it > today and it failed to pull the configuration. > > I ran wireshark and noticed that even though I defined: > --script-args snmpcommunity=private > it passed public as the string. > > I tried typing the script from scratch and going back to some notes I had > on using the script but I was unsuccessful. If I set the switch up with a > RW community of public it works. > > I started up a virtual machine that had Nmap 6.47 installed and the script > worked perfectly. > > i tried the script on Ubuntu and Windows 7. > > Is there something I have to do in nmap 7.40 to pass the argument? > > If not can you point me in the right direction to troubleshoot? > > Thanks! > > Here is my command line. > > mhubbard@1S1K-SYS76:~$ sudo nmap -v -n -sU -p 161 --script > snmp-ios-config --script-args snmpcommunity=private 192.168.10.51 > > Starting Nmap 7.40 ( https://nmap.org ) at 2017-04-16 16:04 PDT > NSE: Loaded 1 scripts for scanning. > NSE: Script Pre-scanning. > Initiating NSE at 16:04 > Completed NSE at 16:04, 0.00s elapsed > Initiating ARP Ping Scan at 16:04 > Scanning 192.168.10.51 [1 port] > Completed ARP Ping Scan at 16:04, 0.03s elapsed (1 total hosts) > Initiating UDP Scan at 16:04 > Scanning 192.168.10.51 [1 port] > Discovered open port 161/udp on 192.168.10.51 > Completed UDP Scan at 16:04, 0.04s elapsed (1 total ports) > NSE: Script scanning 192.168.10.51. > Initiating NSE at 16:04 > Completed NSE at 16:04, 5.00s elapsed > Nmap scan report for 192.168.10.51 > Host is up (0.0036s latency). > PORT STATE SERVICE > 161/udp open snmp > MAC Address: 64:00:F1:01:6F:C1 (Cisco Systems) > > NSE: Script Post-scanning. > Initiating NSE at 16:04 > Completed NSE at 16:04, 0.00s elapsed > Read data files from: /usr/local/bin/../share/nmap > Nmap done: 1 IP address (1 host up) scanned in 5.41 seconds > Raw packets sent: 2 (116B) | Rcvd: 2 (158B) > mhubbard@1S1K-SYS76:~$ > > -- > > http://mwhubbard.blogspot.com > > Twitter: @rikosintie > > https://www.linkedin.com/in/mwhubbard > > Minilock Public Key > > 22LXKQertj4op8vCjpWNmGJyaGPryp3BEFv8d2y4rTzG4Q > > > > _______________________________________________ > Sent through the dev mailing list > https://nmap.org/mailman/listinfo/dev > Archived at http://seclists.org/nmap-dev/ > _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/