> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/enum/snmp-discovery/onesixtyone.md).

# onesixtyone

## Enumeration

### Standard scan

Scan a single machine

```bash
onesixtyone $TARGET_IP [<community>]
```

The default community names are: `public` and `private`.

Scan a list of hosts with a list of community strings

```bash
onesixtyone -i hosts.txt -c communities.txt
```

Scan a CIDR-net

```bash
onesixtyone 192.168.4.0/24 public
```

## Usage information

<details>

<summary>onesixtyone</summary>

```bash
┌──(kali㉿kali)-[~]
└─$ onesixtyone       
onesixtyone 0.3.3 [options] <host> <community>
  -c <communityfile> file with community names to try
  -i <inputfile>     file with target hosts
  -o <outputfile>    output log
  -p                 specify an alternate destination SNMP port
  -d                 debug mode, use twice for more information

  -s                 short mode, only print IP addresses

  -w n               wait n milliseconds (1/1000 of a second) between sending packets (default 10)
  -q                 quiet mode, do not print log to stdout, use with -o
host is either an IPv4 address or an IPv4 address and a netmask
default community names are: public private

Max number of hosts :           65536
Max community length:           32
Max number of communities:      16384


examples: onesixtyone 192.168.4.0/24 public
          onesixtyone -c dict.txt -i hosts -o my.log -w 100

```

</details>

## Resources

onesixtyone - GitHub: <https://github.com/trailofbits/onesixtyone>

onesixtyone - Kali Tools: <https://www.kali.org/tools/onesixtyone/>