Enumeration

(

)

Simple Network Management Protocol Enumeration

• SNMP (Simple Network Management Protocol) is an application layer protocol that runs on UDP, and is used to maintain and manage routers, hubs, and switches on an IP network. SNMP agents run on Windows and UNIX networks on networking devices.
• SNMP enumeration is the process of enumerating the user's accounts and devices on a target computer using SNMP. Two types of software components are employed by SNMP for communicating. They are the SNMP agent and SNMP management station. The SNMP agent is located on the networking device whereas the SNMP management station is

SNMP clients gather performance intel and report back to a centralized reporting point

• The Lightweight Directory Access Protocol (LDAP) enables applications to access directory listings from directory services such as an Active Directory.
• An LDAP is usually integrated into the Domain Name System (DNS) for quicker resolution of queries and an expedited lookup process. An attacker can exploit a directory scanner to query the LDAP service through port 389 anonymously. This gives the attacker access to a host of information that can be misused to orchestrate social engineering or brute force attacks. Though the impact of such attacks varies, information uncovered by LDAP enumeration attacks generally includes active directory objects, access lists, usernames, groups, trusts, sessions, etc.

• The DNS service enables consistency using zone transfers to copy the information across servers. The zone transfer service requires no authentication, enabling malicious actors to obtain a copy of the entire DNS zone from any DNS server. This facilitates exposing information about the configuration of all hosts within the domain, which opens up security gaps within the network’s topology.