Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cisco-SNMP-enumeration — Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking | Kitploit
Tools/GitHubGitHub/nccgroup/cisco-snmp-enumeration
Password CrackingVulnerability AnalysisConfiguration AuditingInformation GatheringNetwork SecurityPenetration Testing
GitHubnccgroup/cisco-snmp-enumeration

cisco-SNMP-enumeration

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking

View Repository
2267210 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Cisc0wn - Cisco SNMP Script

Cisco SNMP enumeration, brute force, config downloader and password cracking script.

Tested and designed to work against Cisco IOS Switches and Routers.

Released as open source by NCC Group Plc - http://www.nccgroup.com/

Developed by Daniel Compton, daniel dot compton at nccgroup dot com

Fixed and updated by Tom Watson, tom dot watson at nccgroup dot com

Minor Comit by Darren McDonald, darren dot mcdonald at nccgroup dot com

Updated by Jason Soto, jason_soto at jsitech dot com

https://github.com/nccgroup/cisco-SNMP-enumeration

Released under AGPL see LICENSE for more information

Installing

root@kitploit:~
git clone https://github.com/nccgroup/cisco-SNMP-enumeration.git

How To Use

root@kitploit:~
./cisc0wn.sh

Features

  • Checks SNMP is enabled on the route
  • Brute forces the SNMP Read Only and Read Write community strings (can edit which wordlist it uses in script header)
  • Enumerates information such as IOS version, hostname, Arp table, Routing table, interface list and IP addresses using the RO or RW community string.
  • If RW community was found it will then download the router config automatically.
  • It then searches and displays any enable or telnet passwords in clear text.
  • If it finds Cisco type 7 encoded enable or telnet passwords it will auto decode them.
  • It will display the Enable secret type 5 password and attempt to crack the MD5. It uses John first with its built in wordlist for speed. If this fails it will try and full crack.

Requirements

  • Metasploit http://www.metasploit.com

Tested on Backtrack 5 and Kali.

New Version Tested in Kali Sana

Screen Shot

Screenshot Screenshot

Change Log

Version 1.8 - Syntax Error in msfconsole Commands Corrected, Part of the Script still using msfcli moved to msfconsole, Updated commands and john password list locations Version 1.7 - Syntax error causing bug when no enable secrets in config file corrected Version 1.6 - Updated to reflect changes in metasploit filesystem use, made grep case insensitive to avoid false negatives, added new location for community string file & moved from the deprecated msfcli to msfconsole -x syntax Version 1.5 - Official release.

Download Tool