Penetration Testing
New tool release: NfSpy, a UID-spoofing NFS client Jul 22 2011 05:08PM
Daniel Miller (bonsaiviking gmail com)
NfSpy is a FUSE filesystem written in Python that automatically changes
UID and GID to give you full access to any file on an NFS share. Use it
to mount an NFS export and act as the owner of every file and directory.

Other features:
* Use filehandles from packet captures instead of asking mountd.
* Hide from sysadmins by immediately "unmounting" while retaining access
* Specify port/protocol for NFS or Mountd if you don't have access to
the portmapper

More info in the README at https://github.com/bonsaiviking/NfSpy

Daniel Miller

------------------------------------------------------------------------

This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus