> For the complete documentation index, see [llms.txt](https://ceh-practical.cavementech.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ceh-practical.cavementech.com/module-4.-enumeration/4.-nfs-enumeration.md).

# 4. NFS Enumeration

NFS (Network File System) is a type of file system that enables computer users to access, view, store, and update files over a remote server. This remote data can be accessed by the client computer in the same way that it is accessed on the local system

## 1. NFS enumeration with RPCscan and SuperEnum

scan the ports

```
nmap -p 2049 192.168.18.110
```

<figure><img src="/files/kLNeKNoj6goCfQD2m710" alt=""><figcaption></figcaption></figure>

### SuperEnum

SuperEnum includes a script that performs a basic enumeration of any open port, including the NFS port (2049).

{% embed url="<https://github.com/p4pentest/SuperEnum>" %}

Run the script. it requires a list of IP addresses in a file

```
./superenum.py
```

<figure><img src="/files/EzgtowyJQJ2waBrClT3F" alt=""><figcaption></figcaption></figure>

### **RPCscan**

RPCScan communicates with RPC (remote procedure call) services and checks misconfigurations on NFS shares. It lists RPC services, mountpoints,and directories accessible via NFS. It can also recursively list NFS shares.

{% embed url="<https://github.com/hegusung/RPCScan>" %}

```
./rpcscan.py 192.168.18.110 --rpc
```

<figure><img src="/files/LGMuCGjAUNNzZiGqug35" alt=""><figcaption></figcaption></figure>

The result appears, displaying that port 2049 is open, and the NFS service is running on it.

{% embed url="<https://www.udemy.com/course/ethical-hacker-practical/?referralCode=289CF01CF51246BCAD6C>" %}