jetlib.sec » Penetration Testing » New tool release: NfSpy, a UID-spoofing NFS client

Feeds

133326 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Penetration Testing

• July 22, 2011
• 

  New tool release: NfSpy, a UID-spoofing NFS client

  Posted: July 22nd, 2011, 7:38pm PDT

  Tags:   

  Posted by Daniel Miller on Jul 22

  NfSpy is a FUSE filesystem written in Python that automatically changes
  UID and GID to give you full access to any file on an NFS share. Use it
  to mount an NFS export and act as the owner of every file and directory.
  
  Other features:
  * Use filehandles from packet captures instead of asking mountd.
  * Hide from sysadmins by immediately "unmounting" while retaining access
  * Specify port/protocol for NFS or Mountd if you don't have...