#
iscsiadm
For messing around with ISCSI stuff. These sites were super helpful in researching this:
- https://www.directdefense.com/compromising-a-backup-system-by-iscsi-interface-during-a-routine-penetration-test/
- https://www.pentestpartners.com/security-blog/an-interesting-route-to-domain-admin-iscsi/
#
Installing
sudo apt install open-iscsi
#
Finding ISCSI
nmap -iL targets.txt --script iscsi-infoLook specifically for output like this:
<snip>
3260/tcp open iscsi
| iscsi-info:
| some.identifier.that.looks.cool:iscsi.corp.11223:
| address: 1.2.3.4:3260,1
| authentication: NOT required
#
Discover targets
sudo iscsiadm -m discovery -t st -p 1.2.3.4:3260
sudo ls /etc/iscsi/send_targets