How to Scan and Hack NFS and RPC for Beginners | Ep. 28

In this episode of 1Trust Security, we explore NFS (Network File System) enumeration and security testing using Kali Linux and Metasploitable 2. You'll learn how to: Understand NFS, RPC, and rpcbind. Scan TCP ports 111 and 2049 using Nmap. Enumerate NFS services with Nmap scripts. Discover exported directories using `showmount`. Mount an NFS export and inspect accessible files. Understand the security risks of exposing the root filesystem. Learn how misconfigured NFS exports can expose sensitive information and how administrators can secure them. This practical tutorial is designed for cybersecurity beginners learning network penetration testing in an authorised lab environment. ⚠️ *Disclaimer:* This video is for educational purposes only. Perform security testing only on systems you own or have explicit permission to test. STUDYING FOR TCM SECURITY OR ACADEMY CERTIFICATIONS? If you are currently working through the industry-leading practical courses or learning paths from TCM Security, this hands-on lab demonstration provides incredible complementary practice. This video applies real-world methodology directly aligned with the core syllabus concepts taught across TCM Academy's major tracks, including: • Practical Ethical Hacking (PEH) & the PNPT Certification Path • Practical Web Pentest Professional (PWPP) • Practical Junior Cyber Intelligence Analyst (PJPT) • Bug Bounty & Practical Web Hacking Fundamentals • Linux 100 / Programming 100 / Security Operations (SOC 101) Whether you are preparing for your PNPT exam network assessment, learning to analyze network traffic with Burp Suite, or building solid foundational ethical hacking habits from scratch, use this practical lab to reinforce your hands-on penetration testing skills. 🛠️ TOOLS & LAB ENVIRONMENT • OS: Kali Linux • Platform: HackingHub (Simulated Enterprise Network Lab) • Key Utilities: Burp Suite, ffuf, subfinder ⚠️ DISCLAIMER This video is strictly for educational, ethical hacking, and authorized defense simulation purposes. All testing is strictly conducted within a fully isolated, simulated laboratory environment with explicit training permission. Never deploy these techniques against public infrastructure without authorized consent. #CyberSecurity #EthicalHacking #TCMSecurity #BurpSuite #PenetrationTesting #BugBounty Subscribe to 1Trust Security for more beginner-friendly cybersecurity and ethical hacking tutorials. 00:00 Introduction to NFS and RPC ports 00:27 Understanding Network File System (NFS) and Remote Procedure Calls (RPC) 01:41 Running Nmap scans on Kali Linux and Metasploitable 03:36 Executing Nmap scripts to gather in-depth NFS and RPC service information 05:31 Using showmount to discover exposed shares and misconfigured star exports 06:30 Creating a local directory for mounting remote shares 07:46 Mounting the remote NFS share onto the local system 09:02 Finding the mount path and listing remote directory contents 11:04 Accessing the remote /etc directory and viewing sensitive files like /etc/passwd 13:03 Summary and recap of the NFS enumeration and exploitation process #NFS #RPCEenumeration #KaliLinux #EthicalHacking #NetworkPentesting