python -c 'import pty; pty.spawn("/bin/sh")'
# List exposed NFS Sharesnmap -p 111 --script=nfs-ls <host>​# Create dir to link tomkdir /mnt/remote_nfs​# Mount exposed share and link to local dir mount -t nfs <IP>:</exposed/dir> /mnt/remote_nfs -o nolock​# Browsecd /mnt/remote_nfs
​