This is a simple introduction to Metasploit. I highly recommend that you get familiar with this tool. It is extremely powerful and we will learn more about it soon!  

SMB Shares can provide a great deal of information, recall, they allow remote access to files! When looking for SMB-enabled devices you want to look for SMB shares that are misconfigured or improperly secured. Accessing an SMB share could allow lateral movement (find other connected systems, up your privileges level, etc). Also, you could download the documents, view the metadata, and learn about other network employees or systems. 

View the demo to see how to search and access SMB shares using Kali Linux. Do not worry about how I used Metasploit Console and the ability to use it. We will dive deep into using it later.  

The SNMP OID (Object Identify) is a hierarchical tree structure. It is used to organize the objects in SNMP. It also provides the ability to navigate and reference specific elements.  We start at the root, also called iso and from there it branches out into various categories. 

Simple Network Management Protocol (SNMP) is an important protocol to consider using to enumerate devices as it can provide a great deal of information about various networking devices (routers, switches, printers). Using SNMP you might be able to identify the version of software or firmware being used, and this could allow you to look for known vulnerabilities. SNMP can allow a pentester the ability to learn valuable information, identify vulnerabilities, assess configurations, and uncover any potential security weakness in a network device. 

View the demo to see how to use snmpwalk to see how we can leverage SNMP in our testing.