SNMP enumeration
bash
# MIB tree is information tree about net management
# comunity strings: public private manager
# nmap scan
sudo nmap -sU --open -p 161 192.168.50.1-254 -OG open-snmp.txt
# onesixtyone (with community strings community.txt)
for ip in $(seq 1 254); do echo 192.168.50.$ip; done; > ips
onesixtyone -c community.txt -i ips
# snmpwalk
snmpwalk -c public -v1 -t 10 192.168.50.151
# output has OID MIB tree info
# query specific OID
snmpwalk -c public -v1 192.168.50.151 1.3.6.1.4.1.77.1.2.25
## OID contains user list, processes list, open ports list...
powershell