SNMP Enumeration

nmap -sU -p 161 TARGET
nmap -sU -p 161 --script=snmp-info TARGET

onesixtyone -c /usr/share/seclists/Discovery/SNMP/common-snmp-community-strings.txt TARGET
onesixtyone -c community.txt 10.10.10.0/24

nmap -sU -p 161 --script=snmp-brute TARGET

hydra -P community.txt TARGET snmp

snmpwalk -v1 -c public TARGET

snmpwalk -v2c -c public TARGET

snmpwalk -v3 -u username -l authPriv -a SHA -A 'authpass' -x AES -X 'privpass' TARGET

# System info
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.1

# Hostname
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.1.5

# Running processes
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.25.4.2.1.2

# Installed software
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.25.6.3.1.2

# Open TCP ports
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.6.13.1.3

# Network interfaces
snmpwalk -v2c -c public TARGET 1.3.6.1.2.1.2.2.1.2

# Users (Windows)
snmpwalk -v2c -c public TARGET 1.3.6.1.4.1.77.1.2.25

snmpbulkwalk -v2c -c public TARGET
snmpbulkwalk -v2c -c public TARGET 1.3.6.1.2.1.25.4.2.1.2

snmp-check TARGET
snmp-check -c public TARGET

snmpwalk -v2c -c public TARGET . | tee snmp_full.txt

snmpwalk -v2c -c public TARGET . | grep -i "password\|user\|login\|community"