TFTP Enumeration

tftp ip_address PUT local_file

tftp ip_address GET conf.txt (or other files)

tftp – i GET /etc/passwd (old Solaris)

Bruteforce TFTP using TFTP bruteforcer tool

Run tftp-enum.nse nmap script

Banner grabbing and finding publicly known exploits