SNMP (161,162)

Query OIDs using SNMPwalk

snmpwalk -v2c -c public 10.129.14.128

Bruteforcing community strings using onesixtyone

onesixtyone -c /opt/useful/SecLists/Discovery/SNMP/snmp.txt 10.129.14.128

Bruteforcing individual OIDs using braa

braa public@10.129.14.128:.1.3.6.*

Notes:

Port 161 (UDP) Port 162 (UDP) for traps v1 and v2c doesnt require authentication v3 requires auth