SNMP-161

• scan SNMP

snmpwalk -v 2c -c public 10.129.42.253 1.3.6.1.2.1.1.5.0
snmpwalk -v1 -c public 10.10.105.79

• enumeration

# Identify SNMPv3 servers using nmap
nmap -sV -p 161 --script=snmp-info $IP

• brute force SNMP secret string

onesixtyone -c dict.txt 10.129.42.254