# UPnP (Universal Plug and Play) Pentesting

## UPnP (Universal Plug and Play) Pentesting <a href="#upnp-universal-plug-and-play-pentesting" id="upnp-universal-plug-and-play-pentesting"></a>

UPnP is a network protocol that allow devices to discover and interact with each other seamlessly over a local network. Default ports are 1900(UDP) and 5000 (TCP).

### Enumeration <a href="#enumeration" id="enumeration"></a>

```shellscript
nmap -sU --script upnp-info -p 1900 <ip>
nmap --script upnp-info -p 5000 <ip>
nmap --script broadcast-upnp-info -p 1900 <ip>
```