NFS

Network File System

Show all mounts

showmount -e $ip

Mount a NFS share

mount $ip:/vol/share /mnt/nfs

Use nfspy to mount a share.

Will get around permission errors

nfspysh -o server=$ip:/home/vulnix/

Nmap Scan on RPCbind and NFS

nmap -v -p 111 10.11.1.1-254

nmap -sV -p 111 --script=rpcinfo 10.11.1.1-254

nmap -p 111 --script nfs* 10.11.1.72

mount

kali@kali:~$ mkdir home
kali@kali:~$ sudo mount -o nolock 10.11.1.72:/home ~/home/
kali@kali:~$ cd home/ && ls
jenny joe45 john marcus ryuu

Note

• Take a look of suid if permission denied

• Create new user and change the suid of user to the correct one

sudo sed -i -e 's/1001/1014/g' /etc/passwd