What is SNMP and LDAP Enumeration in Ethical Hacking? Tools, Ports, Commands, and Protection Guide

Table of Contents

• What Is Enumeration in Ethical Hacking?
• What is SNMP Enumeration?
• What is LDAP Enumeration?
• Key Differences Between SNMP and LDAP Enumeration
• Risks of Unsecured SNMP and LDAP
• How to Protect SNMP and LDAP Services
• Summary Table
• Conclusion
• Frequently Asked Questions (FAQs)

What Is Enumeration in Ethical Hacking?

Enumeration means collecting detailed information from a target system in a network. It helps ethical hackers find:

• Usernames

• Network shares

• Services running

• Devices and configurations

Two common types of enumeration used in cybersecurity are SNMP Enumeration and LDAP Enumeration. Let’s understand them one by one.

 What is SNMP Enumeration?

 SNMP stands for:

Simple Network Management Protocol

It is used to monitor and manage devices on a network like routers, switches, printers, and servers.

 Default Ports:

• UDP 161 – For communication

• UDP 162 – For receiving alerts (called "traps")

 Services Provided by SNMP:

• Monitor network device health

• Get device configuration details

• Collect interface and routing info

• Read system information like CPU, memory, OS

 Why Is SNMP Enumeration Important?

If not properly secured, SNMP can reveal sensitive information, including:

• Device name and location

• Network interfaces and IPs

• ARP table

• Routing table

• Installed software

• Uptime and performance data

 Tools Used for SNMP Enumeration

 Example Commands

snmpwalk -v 2c -c public 192.168.1.1

• -v 2c = SNMP version

• -c public = Community string (like a password)

• 192.168.1.1 = Target IP

 What is LDAP Enumeration?

LDAP stands for:

Lightweight Directory Access Protocol

It’s used to access and manage directory services like Active Directory in Windows environments.

 Default Port Numbers:

• TCP 389 – Regular LDAP

• TCP 636 – Secure LDAP (LDAPS)

 Services Provided by LDAP:

• Store and retrieve user credentials

• Maintain access control lists

• Manage group policies

• Directory lookups for users, printers, devices

 Why Is LDAP Enumeration Important?

LDAP servers often hold sensitive data like:

• Username and password policies

• Group membership

• Domain structure

• Email addresses

• Computer and service accounts

 Tools Used for LDAP Enumeration

 Example Commands

ldapsearch -x -h 192.168.1.100 -b "dc=company,dc=com"

• -x = Simple auth

• -h = LDAP server IP

• -b = Base domain to start searching

 Key Differences Between SNMP and LDAP Enumeration

Risks of Unsecured SNMP and LDAP

If SNMP or LDAP is misconfigured:

• Hackers can map the network

• Extract user data without login

• Create detailed attack plans

• Perform privilege escalation

• Launch credential-stuffing attacks

How to Protect SNMP and LDAP Services

✅ Summary Table

 Final Thoughts

Both SNMP and LDAP enumeration are vital reconnaissance tools in ethical hacking. They reveal valuable information about an organization's infrastructure and users. Knowing how to use these tools—and how to protect against them—is key for every SOC analyst, red teamer, and cybersecurity student.