diff --git a/Post Exploitation/NFS Root Squash.md b/Post Exploitation/NFS Root Squash.md index 7f848a7..e13532e 100644 --- a/Post Exploitation/NFS Root Squash.md +++ b/Post Exploitation/NFS Root Squash.md @@ -1,13 +1,28 @@ # NFS NO ROOT SQUASH -* Mount nfs locally and gain root +Mount NFS locally and gain root through activated `no_root_squash`. +When "no_root_squash" is enabled on an NFS share, it means that the "root" user +from the client system retains its full privileges when interacting with files +on the NFS share. In other words, any actions performed by the "root" user on +the client system are replicated with full permissions on the NFS server. This +can potentially lead to a security vulnerability, especially if the client +system is compromised or maliciously manipulated. + +## Exploit + +### Craft a Shell + +Craft a shell and execute it on the NFS share which has `no_root_squash` +enabled to gain root privilege. -## Craft a Shell ```sh msfvenom -p linux/x86/exec CMD="/bin/bash -p" -f elf -o /tmp/nfs/shell.elf ``` -* Copy to target and use it + +After the shell has been created on or copied to the share, execute it on the +target share + ```sh ./shell.elf -p ``` diff --git a/Post Exploitation/pspy.md b/Post Exploitation/pspy.md index 1e532b4..f11d591 100644 --- a/Post Exploitation/pspy.md +++ b/Post Exploitation/pspy.md @@ -1,5 +1,7 @@ # pspy -* Snoop processes withou root permissions -* [Repo](https://github.com/DominicBreuker/pspy.git) - +[pspy](https://github.com/DominicBreuker/pspy.git) is a linux command-line utility that allows you to observe processes without +being detected. It is used for monitoring and analyzing system activities. pspy +allows you to track running processes, their arguments, and related +information, which can be useful for debugging, security auditing, and system +analysis.