Technical (Bottom-Up) Methodology 125
Browser. This tool uses ICMP and SNMP to perform a very fast network
discovery. The detailed information it returns includes details of each
interface, port speed, IP addresses, routes, ARP tables, accounts, mem-
ory, sysObjectIDs, and much more.
Opinion: The SolarWinds toolkit has a number of great tools. The IP
Network Browser Tool that we use for network enumeration is fast
and easy to use. Other tools in the toolkit include a network traffic
generator, an SNMP brute-force password crack, and countless Cisco
management tools. A great toolset for the price.
SNScan
URL: http://www.foundstone.com
Price: Free
OS: NT
Vendor’s comments: SNScan is a Windows-based SNMP detection utility
that can quickly and accurately identify SNMP-enabled devices on a
network (see Exhibit 31). This utility can effectively indicate devices
that are potentially vulnerable to SNMP-related security threats such as
those released on February 12, 2002.
Opinion: A similar tool to IP Network Browser, but with a few less features.
However, it has a much smaller price tag.
Exhibit 31. SNScan