RPCScan
RPCScan copied to clipboard
Published
20 hours ago •
hegusung
hegusung
Tool to communicate with RPC services and check misconfigurations on NFS shares
Results
5
RPCScan issues
Sort by
recently updated
recently updated
newest added
RPC reply bodies can be either MSG_ACCEPTED or MSG_DENIED: https://www.rfc-editor.org/rfc/rfc1831.html#page-11 MSG_ACCEPTED are 24 bytes long (6 fields of 4 bytes):  This is correctly handled by current code. MSG_DENIED however...
rpc-scan generates "nfs://" URLs with the port number in it, ex: ``` # ./rpc-scan.py --nfs 10.0.0.1 rpc://10.0.0.1:111 Portmapper nfs://10.0.0.1:2049/test/ [...] ``` Then if we use those URLs with nfs-get it...