NFS 2049

Configuration files

/etc/exports
/etc/lib/nfs/xtab

Enumeration

nmap -sV --script=nfs-ls $ip
showmount -e hostname/ip_address
mount -t nfs ip_address:/directory_found_exported /local_mount_point

Tools

• NFS shell - Provides user level access to an NFS server, over UDP or TCP, supports source routing and "secure" (privileged port) mounts - https://github.com/NetDirect/nfsshell

nfsshell> host <ip>
nfsshell> mount <name of the share>
nfsshell> gid 1000
nfsshell> uid 1000
nfsshell> put example
nfsshell> chmod 0777 example

References

New References

• http://linuxadministrative.blogspot.com/2014/09/showmount-command-examples.html
• Exploiting Network File System, (NFS), shares: http://www.vulnerabilityassessment.co.uk/nfs.htm