UPnP (Universal Plug and Play) Pentesting

Last modified: 2023-02-25

Network

UPnP is a network protocol that allow devices to discover and interact with each other seamlessly over a local network. Default ports are 1900(UDP) and 5000 (TCP).

Enumeration

nmap -sU --script upnp-info -p 1900 <ip>
nmap --script upnp-info -p 5000 <ip>
nmap --script broadcast-upnp-info -p 1900 <ip>