Back to Port Tracker
💾

NFS

Port 2049Linux

Network File System — list exports, mount them, hunt for SUID privesc.

// methodology checklist

Step-by-step commands

1

Enumerate exports

howlsec@kali·shell
showmount -e $t
howlsec@kali·shell
nmap -p2049 --script nfs-showmount,nfs-ls $t
2

Mount & loot

howlsec@kali·shell
mkdir /mnt/nfs && mount -t nfs $t:/export /mnt/nfs -o nolock
howlsec@kali·shell
find /mnt/nfs -type f -perm -4000 2>/dev/null