Information Gatheringsnmpscannerenumerationnetwork

onesixtyone

onesixtyone is a fast and simple SNMP scanner that sends asynchronous SNMP requests for the sysDescr value to discover software descriptions on network devices. It supports user-adjustable timing and logging of responses.

Description

onesixtyone is designed for efficient SNMP enumeration across large networks. It sends SNMP requests asynchronously, allowing rapid scanning without packet drops, as demonstrated by scanning 65536 IP addresses in under 13 minutes on a class B network.

Use cases include network reconnaissance to identify device types and software versions via sysDescr responses. It supports custom community strings, host lists, and output logging, making it suitable for targeted or broad SNMP sweeps.

Default communities are 'public' and 'private', with limits of 65536 hosts, 16384 communities, and 32-character community length.

How It Works

The tool sends SNMP GET requests for the sysDescr OID asynchronously to specified hosts using provided community strings. Responses are logged with adjustable inter-packet delays to control scan speed and avoid overwhelming networks. It supports IPv4 addresses or CIDR notation, alternate ports, and debug modes for troubleshooting.

Installation

bash
sudo apt install onesixtyone

Flags

-c <communityfile>file with community names to try
-i <inputfile>file with target hosts
-o <outputfile>output log
-pspecify an alternate destination SNMP port
-ddebug mode, use twice for more information
-sshort mode, only print IP addresses
-w nwait n milliseconds (1/1000 of a second) between sending packets (default 10)
-qquiet mode, do not print log to stdout, use with -o

Examples

Scans the 192.168.4.0/24 network using the 'public' community string
onesixtyone 192.168.4.0/24 public
Uses community file dict.txt, host file hosts, logs to my.log, waits 100ms between packets
onesixtyone -c dict.txt -i hosts -o my.log -w 100
Scans class B network /16 with 10ms wait for high performance
onesixtyone -w 10 192.168.0.0/16 public
Tests single host with communities from file
onesixtyone -c communities.txt 192.168.1.1
Scans hosts from file with default communities, logs to file
onesixtyone -i targets.txt -o results.log public private
Scans /8 network on port 161 with debug output
onesixtyone -p 161 -d 10.0.0.0/8 public
Quiet short mode scan logging only IPs to file
onesixtyone -s -q -o scan.log 172.16.0.0/12 private
Updated 2026-04-16kali.org ↗