Network File System — list exports, mount them, hunt for SUID privesc.
showmount -e $t
nmap -p2049 --script nfs-showmount,nfs-ls $t
mkdir /mnt/nfs && mount -t nfs $t:/export /mnt/nfs -o nolock
find /mnt/nfs -type f -perm -4000 2>/dev/null