A penetration tester received the following output after running the Nmap command: Which of the following should the penetration tester try next?

The correct answer is C. Mount the file sharing. From the Nmap output, the following points are observed: - Port 2049 (nfs) is open, indicating that NFS (Network File System) is enabled. - The script output shows the nfs-showmount results, listing the /home/sysadmin share as Since the NFS service is running and a share is…

Reconnaissance and enumeration

Question

A penetration tester received the following output after running the Nmap command:

Which of the following should the penetration tester try next?

Exhibit

Options

ABrute force the FTP service
BAttack the SSH service
CMount the file sharing
DConnect to the web server

How the community answered

(59 responses)

A
5% (3)
B
3% (2)
C
80% (47)
D
12% (7)

Explanation

From the Nmap output, the following points are observed: - Port 2049 (nfs) is open, indicating that NFS (Network File System) is enabled. - The script output shows the nfs-showmount results, listing the /home/sysadmin share as Since the NFS service is running and a share is available, the next logical step for a penetration tester is to attempt to mount the NFS share (/home/ sysadmin) to analyze its contents for sensitive information, misconfigurations, or vulnerabilities.

Topics

#File sharing enumeration#Nmap follow-up#Information gathering#SMB/NFS

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice