Discovery
Community String Brute-Force
onesixtyone
Nmap
Hydra
public, private, manager, community.
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
SNMP enumeration with snmpwalk, onesixtyone, and snmpbulkwalk: community strings, OIDs, and data extraction.
nmap -sU -p 161 TARGET
nmap -sU -p 161 --script=snmp-info TARGET
onesixtyone -c /usr/share/seclists/Discovery/SNMP/common-snmp-community-strings.txt TARGET
onesixtyone -c community.txt 10.10.10.0/24
nmap -sU -p 161 --script=snmp-brute TARGET
hydra -P community.txt TARGET snmp
public, private, manager, community.
snmpwalk -v1 -c public TARGET
snmpwalk -v2c -c public TARGET
snmpwalk -v3 -u username -l authPriv -a SHA -A 'authpass' -x AES -X 'privpass' TARGET
# System info
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.1
# Hostname
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.1.5
# Running processes
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.25.4.2.1.2
# Installed software
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.25.6.3.1.2
# Open TCP ports
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.6.13.1.3
# Network interfaces
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.2.2.1.2
# Users (Windows)
snmpwalk -v2c -c public TARGET 1.3.6.1.4.1.77.1.2.25
| OID | Data |
|---|---|
1.3.6.1.2.1.1 | System info |
1.3.6.1.2.1.25.4.2.1.2 | Running processes |
1.3.6.1.2.1.25.6.3.1.2 | Installed software |
1.3.6.1.2.1.6.13.1.3 | Open TCP ports |
1.3.6.1.4.1.77.1.2.25 | Windows users |
snmpbulkwalk -v2c -c public TARGET
snmpbulkwalk -v2c -c public TARGET 1.3.6.1.2.1.25.4.2.1.2
snmp-check TARGET
snmp-check -c public TARGET
snmpwalk -v2c -c public TARGET . | tee snmp_full.txt
snmpwalk -v2c -c public TARGET . | grep -i "password\|user\|login\|community"
| Task | Command |
|---|---|
| Brute community | onesixtyone -c list.txt TARGET |
| Walk v2c | snmpwalk -v2c -c public TARGET |
| Processes | snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.25.4.2.1.2 |
| Users | snmpwalk -v2c -c public TARGET 1.3.6.1.4.1.77.1.2.25 |
| Full dump | snmpwalk -v2c -c public TARGET . |