hacktricks/network-services-pentesting/24007-24008-24009-49152-pentesting-glusterfs.md
2024-02-10 17:52:19 +00:00

4.2 KiB

htARTE (HackTricks AWS Red Team Expert) !HackTricks AWS Red Team Expert!

Other ways to support HackTricks:

Basic Information

GlusterFS is a distributed file system that combines storage from multiple servers into one unified system. It allows for arbitrary scalability, meaning you can easily add or remove storage servers without disrupting the overall file system. This ensures high availability and fault tolerance for your data. With GlusterFS, you can access your files as if they were stored locally, regardless of the underlying server infrastructure. It provides a powerful and flexible solution for managing large amounts of data across multiple servers.

Default ports: 24007/tcp/udp, 24008/tcp/udp, 49152/tcp (onwards)
For the port 49152, ports incremented by 1 need to be open to use more bricks. Previously the port 24009 was used instead of 49152.

PORT      STATE  SERVICE
24007/tcp open   rpcbind
49152/tcp open   ssl/unknown

Enumeration

To interact with this filesystem you need to install the GlusterFS client (sudo apt-get install glusterfs-cli).

To list and mount the available volumes you can use:


qar'a'

ghItlhvam vItlhutlh: GlusterFS client (sudo apt-get install glusterfs-cli) vaj.

volumey vItlhutlh je vItlhutlhlaHbe'chugh, 'ej 'oH vItlhutlhlaHbe'chugh, 'ej:

sudo gluster --remote-host=10.10.11.131 volume list
# This will return the name of the volumes

sudo mount -t glusterfs 10.10.11.131:/<vol_name> /mnt/

filesystem-e' vItlhutlh error trying to mount the filesystem-e'. logs-mey /var/log/glusterfs/-Daq logmey vItlhutlh.

certificates-e' vItlhutlh Errors mentioning certificates-e'. files-mey (vaj vay' vItlhutlh) files-mey vItlhutlh:

  • /etc/ssl/glusterfs.ca
  • /etc/ssl/glusterfs.key
  • /etc/ssl/glusterfs.ca.pem

'ej machine-Daq vItlhutlh /etc/ssl 'ej /usr/lib/ssl-Daq (vaj vay' vItlhutlh) machine-Daq vItlhutlh (vaj vay' vItlhutlh 'ej logs vItlhutlh "could not load our cert at /usr/lib/ssl/glusterfs.pem"-e' vItlhutlh) .

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks: