Skip to content
HackIndex logo

HackIndex

NFS
Service

NFS

NFS file share protocol. Attackers enumerate exports, mount shares, abuse UID trust and no_root_squash to access files, plant SUID binaries, escalate privileges, and exfiltrate data

:2049 8 guides 4 phases
1 min read Updated: Jul 13, 2026

What is NFS?

Network File System lets UNIX/Linux systems share directories and files over a network.

Common security issues

  • World-readable exports.

  • No root squashing.

  • Sensitive files exposed.

  • Easy lateral movement with mounts.

Default ports

  • 2049

Enumeration

NFS export discovery, content listing, and share mounting guides

3

Vulnerability Discovery

Find open NFS exports, weak configs, and no_root_squash misconfigs

2

NFS no_root_squash Detection

Identifies misconfigured NFS exports with no_root_squash enabled, allowing remote root privilege escalation via mounted shares.

May 15, 2026 • 3 min read

NFS World-Readable Exports

Identifies misconfigured NFS exports allowing unauthenticated access, covering enumeration with showmount, mounting shares, and extracting sensitive data from world-readable exports.

May 15, 2026 • 3 min read

Exploitation

Mount NFS shares and exploit UID trust to access files and credentials

2

Privilege Escalation

Abuse NFS no_root_squash to plant SUID binaries or SSH keys

1