Cisco IOS SNMP File Upload (TFTP)
This module will copy file to a Cisco IOS device using SNMP and TFTP. A read-write SNMP community is required. The SNMP community scanner module can assist in identifying a read-write community. The target must be able to connect back to the Metasploit system and the use of NAT will cause the TFTP transfer to fail.
Rank
- Normal
Authors
- pello < fropert [at] packetfault.org >
Development
Similar Modules
- auxiliary/scanner/snmp/aix_version
- auxiliary/scanner/snmp/cisco_config_tftp
- auxiliary/scanner/snmp/snmp_enum
- auxiliary/scanner/snmp/snmp_enumshares
- auxiliary/scanner/snmp/snmp_enumusers
- auxiliary/scanner/snmp/snmp_login
- auxiliary/scanner/snmp/snmp_set
- auxiliary/scanner/snmp/xerox_workcentre_enumusers
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/scanner/snmp/cisco_upload_file
msf auxiliary(cisco_upload_file) > set RHOSTS [TARGET HOST RANGE]
msf auxiliary(cisco_upload_file) > set SOURCE [PATH]
msf auxiliary(cisco_upload_file) > run
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/scanner/snmp/cisco_upload_file
msf auxiliary(cisco_upload_file) > set RHOSTS [TARGET HOST RANGE]
msf auxiliary(cisco_upload_file) > set SOURCE [PATH]
msf auxiliary(cisco_upload_file) > run
Module Options
| COMMUNITY | SNMP Community String (default: public) |
| LHOST | The IP address of the system running this module |
| RETRIES | SNMP Retries (default: 1) |
| RHOSTS | The target address range or CIDR identifier |
| RPORT | The target port (default: 161) |
| SOURCE | The filename to upload |
| THREADS | The number of concurrent threads (default: 1) |
| TIMEOUT | SNMP Timeout (default: 1) |
| VERSION | SNMP Version <1/2c> (default: 1) |
| CHOST | The local client address |
| CPORT | The local client port |
| ShowProgress | Display progress messages during a scan |
| ShowProgressPercent | The interval in percent that progress should be shown |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |
