NFS - 111, 2049

Built upon the ONC-RPC protocol

Configuration file

NFS configuration files can be found at /etc/exports

NFS version

Nmap enumeration of NFS shares

sudo nmap --script nfs* 10.129.14.128 -sV -p111,2049

Check for NFS share to mount

showmount -e <IP>

Mounting an NFS share

The command below mount the root / path of the target to our local directory target-NFS.

mkdir target-NFS
sudo mount -t nfs 10.129.14.128:/ ./target-NFS/ -o nolock

Check for the no_root_squash option as it can be a privilege escalation path