Okay , I’m really struggling to the point imposter syndrome is creeping in.
So it seems like one of the first few steps I have to do is mount. I used the standard mount command but it didn’t work. I was able to mount after sudo mount. Now , I tried to cd into the mounted directory, but I’m having and access issue. Some people are saying something about ‘root’ but im honestly lost. Any advice is super appreciated :))
Hi , I know this was a whiel ago, but did you end up solving this ? I’m also stuck at the noboy previlige and even if i have the nfs mounted, i cannot access to the directory because of PERMISSION DENIED
showmount -e <FQDN/IP>
mount -t nfs <FQDN/IP>:/ ./target-NFS/ -o
–>Note :- Do ls -la but it takes some time just be patient. (you will identify i txt file has different size )
–>Got 1 user and pass
–>Go through rdp (i love remmina)
–>check all folders because some one writer imp passwords in txt files
–>the imp pass may also be administrator
–>if so administrator will also be comprimised
–>if hyker has admin rights he can dig sqlservice from remmina by running queries from admin account. acutually admin can also view process,services running and change the access control of the service .
–>if this happen every user can query mssql (you no need to do this )
–>just query from administrator acc
→ speacial thanks to @flydragon for direct query
After you mount nfs with nobody, you have sudo on your pwnbox, your sudo password is on your desktop.
After you sudo you should be able to access TechSupport folder, use Grep to find the pass/user.
Use the credential found to RDP. I was stuck here while using xfreerdp.
Use Remmina in your pwnbox to rdp to target.
Look for ‘important’ file.
important file is local administrator password
use that password and try to "run as administrator "
navigate around, and some basic SQL WHERE statement.
If you are stuck, then following reading can help you understand what needed to be done.
First , do nmap scan and understand what type of server is it and what the server is running and take note of the fact that everyone can access it.
Understand the meaning and concept of exports in NFS
Exporting a directory declares that a directory in the server's namespace is available to client machines. If you see a directory as NFS export (a directory that has been exported by an NFS server), then it means that a user can mount it. Mounting a directory makes the files that reside on the NFS server available to the user.