nfs-privesc.md

nfs privesc

Create a user with same uid in our machine:

Modify /etc/login.defs to allow higher UID_MAX

Then copy bash to the nfs share and give it SUID

If GLIBC error then copy bash from victim and give it SUID