Last updated 3 years ago
# List exposed NFS Shares nmap -p 111 --script=nfs-ls <host> # Create dir to link to mkdir /mnt/remote_nfs # Mount exposed share and link to local dir mount -t nfs <IP>:</exposed/dir> /mnt/remote_nfs -o nolock # Browse cd /mnt/remote_nfs
python -c 'import pty; pty.spawn("/bin/sh")'