GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → hegusung → RPCScan

hegusung / RPCScan

Licence: MIT license
Tool to communicate with RPC services and check misconfigurations on NFS shares

Programming Languages

python
139335 projects - #7 most used programming language

Labels

nfsrpcpentestingpentestnfs-clientpentest-tool

Projects that are alternatives of or similar to RPCScan

Sec Tools
Docker images for infosec tools
Stars: ✭ 135 (+154.72%)
Mutual labels:  pentest, pentest-tool
fuse-nfs-crossbuild-scripts
fuse-nfs for windows using dokany
Stars: ✭ 35 (-33.96%)
Mutual labels:  nfs, nfs-client
Xssor2
XSS'OR - Hack with JavaScript.
Stars: ✭ 1,969 (+3615.09%)
Mutual labels:  pentest, pentest-tool
Ssrf Testing
SSRF (Server Side Request Forgery) testing resources
Stars: ✭ 1,718 (+3141.51%)
Mutual labels:  pentest, pentest-tool
PyParser-CVE
Multi source CVE/exploit parser.
Stars: ✭ 25 (-52.83%)
Mutual labels:  pentest, pentest-tool
Jwtxploiter
A tool to test security of json web token
Stars: ✭ 130 (+145.28%)
Mutual labels:  pentest, pentest-tool
Docker Security Images
🔐 Docker Container for Penetration Testing & Security
Stars: ✭ 172 (+224.53%)
Mutual labels:  pentest, pentest-tool
Cloakify
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
Stars: ✭ 1,136 (+2043.4%)
Mutual labels:  pentest, pentest-tool
sqlscan
Quick SQL Scanner, Dorker, Webshell injector PHP
Stars: ✭ 140 (+164.15%)
Mutual labels:  pentest, pentest-tool
weakpass generator
generates weak passwords based on current date
Stars: ✭ 36 (-32.08%)
Mutual labels:  pentest, pentest-tool
Sippts
Set of tools to audit SIP based VoIP Systems
Stars: ✭ 116 (+118.87%)
Mutual labels:  pentest, pentest-tool
LAZYPARIAH
A tool for generating reverse shell payloads on the fly.
Stars: ✭ 121 (+128.3%)
Mutual labels:  pentest, pentest-tool
Catnip
Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux
Stars: ✭ 108 (+103.77%)
Mutual labels:  pentest, pentest-tool
Trigmap
A wrapper for Nmap to quickly run network scans
Stars: ✭ 132 (+149.06%)
Mutual labels:  pentest, pentest-tool
Cloudflair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Stars: ✭ 1,176 (+2118.87%)
Mutual labels:  pentest, pentest-tool
Pymeta
Pymeta will search the web for files on a domain to download and extract metadata. This technique can be used to identify: domains, usernames, software/version numbers and naming conventions.
Stars: ✭ 170 (+220.75%)
Mutual labels:  pentest, pentest-tool
Powerladon
Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC
Stars: ✭ 39 (-26.42%)
Mutual labels:  pentest, pentest-tool
Sudo killer
A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.
Stars: ✭ 1,073 (+1924.53%)
Mutual labels:  pentest, pentest-tool
Awesome Privilege Escalation
A curated list of awesome privilege escalation
Stars: ✭ 413 (+679.25%)
Mutual labels:  nfs, pentest
puppet-nfs
Installs and configures NFS server and clients
Stars: ✭ 14 (-73.58%)
Mutual labels:  nfs, nfs-client
View All Similar Projects ➔

RPCScan

Tool to communicate with RPC services and check misconfigurations on NFS shares

This tool currently has the following features:

  • Listing RPC services using portmap
  • Listing mountpoints on hosts using mount service
  • Perform recursive listing on NFS share
  • List a directory accessible via NFS
  • Download a file accessible via NFS

RPCScan Usage

If the 'insecure' paramater is not set on the NFS server configuration, it will be necessary to run the script as root because the NFS server will check whether the incomming communication comes from a source port <= 1024 when connecting with uid=0 (root).

rpc-scan.py

Listing RPC services

rpc-scan.py <host/host_range> --rpc

Listing mountpoints

rpc-scan.py <host/host_range> --mounts

Recursing listing of NFS shares

rpc-scan.py <host/host_range> --nfs --recurse 3

nfs-ls.py

nfs-ls.py nfs://<host>/directory/path

nfs-get.py

nfs-get.py nfs://<host>/file/path.txt -d output_name.txt

Dependencies

  • python3
  • argparse

Misc

The rpc_names.csv file is taken from the IANA website: https://www.iana.org/assignments/rpc-program-numbers/rpc-program-numbers.xhtml

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].