onesixtyone

High-speed brute force of SNMP community strings.

Guesses the SNMP *community string* by trying a dictionary against one or many hosts. SNMP is UDP and does not lock out attempts, so brute force is viable and extremely fast. Guessing the string (far more often than it should be, it turns out to be `public`) turns port 161 into a full dump of the device: processes, users, installed software, network interfaces and, on badly configured gear, plaintext credentials.

Family Network & port scanning

Flags -c -i -w

Concepts SNMP enumeration

Cheatsheet SNMP · 161

Installation

sudo apt install -y onesixtyone

Useful commands2 commands

Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.