OSCP-notes

Let's try harder...

View on GitHub

Probe the host with rpcinfo to get details

rpcinfo -p 192.168.145.133

Check for available shares using showmount

showmount -e 192.168.145.133

Mount the share on your local file system

mount -t nfs 192.168.145.133:/ /tmp/mount_point

You can also add your ssh key to the /root/.ssh/authorized_keys of mounted file system to get shell over ssh.