Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

module

Windows Gather Local NBD Server

Disclosed
N/A
Created
May 30, 2018

Description

Maps remote disks and logical volumes to a local Network Block Device server.
Allows for forensic tools to be executed on the remote disk directly.

Author

Wesley McGrew [email protected]

Platform

Windows

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use post/windows/gather/forensics/nbd_server
msf post(nbd_server) > show actions
...actions...
msf post(nbd_server) > set ACTION < action-name >
msf post(nbd_server) > show options
...show and set options...
msf post(nbd_server) > run

Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.