Nmap snmp-hh3c-logins NSE Script


This page contains detailed information about how to use the snmp-hh3c-logins NSE script. For list of all NSE scripts, visit the Nmap NSE Library.

Script Overview

Script source code: https://github.com/nmap/nmap/tree/master/scripts/snmp-hh3c-logins.nse
Script categories: default, discovery, safe
Target service / protocol: snmp, udp
Target network port(s): 161
List of CVEs: -

Script Description

The snmp-hh3c-logins.nse script attempts to enumerate Huawei / HP/H3C Locally Defined Users through the hh3c-user.mib OID

For devices running software released pre-Oct 2012 only an SNMP read-only string is required to access the OID. Otherwise a read-write string is required.

Output is 'username - password - level: {0|1|2|3}'

Password may be in cleartext, ciphertext or sha256 Levels are from 0 to 3 with 0 being the lowest security level

Snmp-hh3c-logins NSE Script Arguments

This is a full list of arguments supported by the snmp-hh3c-logins.nse script:

creds.global

Credentials to be returned by Credentials.getCredentials regardless of the service.

creds.[service]

Credentials to be returned by Credentials.getCredentials for [service]. E.g. creds.http=admin:password

snmp.version

The SNMP protocol version. Use "v1" or 0 for SNMPv1 (default) and "v2c" or 1 for SNMPv2c.

- - -
To use these script arguments, add them to the Nmap command line using the --script-args arg1=value,[arg2=value,..] syntax. For example:

nmap --script=snmp-hh3c-logins --script-args creds.global=value,creds.\[service]=value <target>

Snmp-hh3c-logins NSE Script Example Usage

Here's an example of how to use the snmp-hh3c-logins.nse script:

nmap -sU -p 161 --script snmp-hh3c-logins --script-args creds.snmp=:<community> <target>

Snmp-hh3c-logins NSE Script Example Output

Here's a sample output from the snmp-hh3c-logins.nse script:

| snmp-hh3c-logins:
|   users:
|     admin - admin - level: 3
|_    h3c - h3capadmin - level 0

Snmp-hh3c-logins NSE Script Example XML Output

Here's a sample XML output from the snmp-hh3c-logins.nse script produced by providing the -oX <file> Nmap option:

 <table>
   <elem key="password">admin<elem>
   <elem key="username">admin</elem>
   <elem key="level">3</elem>
 </table>
 <table>
   <elem key="password">h3capadmin<elem>
   <elem key="username">h3c</elem>
   <elem key="level">0</elem>
 </table>

Author

  • Kurt Grutzmacher

References

See Also

Related NSE scripts to the snmp-hh3c-logins.nse script:

Visit Nmap NSE Library for more scripts.

Version

This page has been created based on Nmap version 7.92.