NFSpionage is a Python tool designed to work with a Man-In-The-Middle attack to hijack and spoof an active Network File System (NFS) connections.
- Python 3
- Python packages:
pip install -r requirements.txt - libdnet
- tcpdump
- Full CRUD functionality for remote, intercepted NFS
- Packet processing and forging (via Scapy)
- Client IP address spoofing (** in progress **)
- TCP and UDP packet forwarding
- Text based client for basic filesystem interaction
- Socket based API for sharing credentials with other programs
- Simple ARP spoof/poisoning script (via Scapy)
Run NFSpionage with the following command:
python nfspionage.py -s NFS_SERVER_IP
At that point, you can use most any NFS client to interact through NFSpionage or just use NFS through the filesystem on the MITM machine like normal.
To use the text client included in this repository, run the following command:
python text_client.py -s NFS_SERVER_IP -m MOUNT_PATH
NFSpionage is able to work with virtually any external MITM/ARP spoof/ARP Poisoning tool i.e., Bettercap.
For simplicity's sake there is a simple script, arp_spoof.py, that performs a basic ARP poisoning attack on the LAN using Scapy.
This project was created by Daniel Nazarian with the help of Dr. Joseph Wilson
If you'd like to contribute or have any questions, feel free to reach out to me at [email protected] or visit DanielNazarian.com for more about me and other projects I'm working on.