CVE-2025-32463-PoC

CVE-2025-32463 – Privilege Escalation via Sudo chroot 📝 Overview CVE-2025-32463 is a local privilege escalation vulnerability affecting the sudo utility. It allows a regular user to escalate privileges to root by exploiting the -R option which sets a custom runtime root directory together with...

CVE-2025-32463_sudo_chroot

CVE-2025-32463 - sudo chroot Uso El Dockerfile crea un entorno de prueba seguro y aislado con una versión vulnerable de sudo 1.9.16p2 instalada. Esto permite probar el exploit sin afectar su sistema anfitrión. Build the vulnerable test environment docker build -t cve . Run the container creates a...

CVE-2025-32463_Sudo_PoC

CVE-2025-32463SudoPoC PoC para CVE-2025-32463: escalada local de privilegios en sudo mediante --chroot. Explota la inyección de módulos NSS a través de entornos chroot diseñados. Pensado para investigadores de seguridad y entornos exclusivamente de laboratorio. CVE-2025-32463 - Escalada local de...

sudoinjection

CVE-2025-32463: Local Privilege Escalation via sudo -R NSS Injection Summary This PoC demonstrates local privilege escalation on Linux systems via abuse of the sudo -R option in conjunction with a custom NSS module. It targets the vulnerability CVE-2025-32463, which stems from unsafe handling of...

CVE-2025-32463_POC

Checking nsswitch.conf default values: passwd: files systemd After calling chroot, sudo trys to parse the config values at nsswitch.conf to run the command, which leads it to try to open libnsssystemd.so.2...

CVE-2025-32463_Exploit

CVE-2025-32463Exploit Affected versions 1.9.14 to 1.9.17 bash run.sh Success as follows neko@aosc-neko205 CVE-2025-32463Exploit@main $ bash run.sh + CVE-2025-32463 Sudo chroot 漏洞复现脚本 正在创建临时工作目录... 工作目录已创建: /tmp/sudoexploit.nc0EjT 正在创建 C 语言 payload woot1337.c... 正在设置 chroot 环境和恶意的 nsswitch.conf...

CVE-2025-32463_illdeed

CVE-2025-32463 — sudo -R Privilege Escalation Exploit illdeed Variant This is a refactored proof-of-concept PoC exploit for CVE-2025-32463, a critical vulnerability in sudo versions 1.9.14 through 1.9.17 that allows local privilege escalation to root via sudo -R and a fake NSS module. ⚠️ This...

CVE-2025-32462-CVE-2025-32463-PoC-Lab

CVE-2025-32462 y CVE-2025-32463 – Laboratorio Avanzado de PoC Este repositorio proporciona un laboratorio basado en contenedores y un PoC detallado para dos vulnerabilidades críticas de sudo: CVE-2025-32462 – Omisión de la lógica de coincidencia de host de sudo -h CVE-2025-32463 – Escape de la...

cve-2025-32463

cve-2025-32463 chroot sudo chroot Ejecuta el comando command en el directorio dir name seleccionado. Mecanismo de la vulnerabilidad Este problema se introdujo en sudo v1.9.14, una versión que actualizó el código de manejo de coincidencias cuando se utiliza la característica chroot. Este nuevo...

CVE-2025-32463

CVE-2025-32463 Is a local privilege escalation vulnerability affecting vulnerable versions of sudo. The flaw abuses the sudo -R chroot feature together with the Linux Name Service Switch NSS mechanism to force sudo into loading an attacker-controlled shared library as root. By manipulating...

cve-2025-32463-lab

CVE-2025-32463 – Laboratorio de escalada de privilegios local con sudo chroot Este repositorio contiene un laboratorio basado en Docker y un exploit de prueba de concepto para CVE-2025-32463, una vulnerabilidad de escalada de privilegios local en sudo versiones 1.9.14 a 1.9.17. 🚨 Aviso legal Este...

CVE-2025-32463

CVE-2025-32463 - Sudo Chroot Privilege Escalation Exploit Overview CVE-2025-32463 is a critical local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. This vulnerability allows attackers with sudo privileges to escalate to root access by exploiting a design flaw in the...

CVE-2025-32463-EXPLOIT

Xpl0it — Secuestro de la biblioteca NSS de Sudo | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Tipo: Prueba de concepto PoC Herramienta de investigación de seguridad CVE: CVE-2023-42456 Técnica: Inyección de biblioteca NSS en chroot de sudo -R → escalada de privilegios a root ⚠️ Aviso de responsabilidad Esta...

CVE-2025-32463-Sudo-Chroot-Escape

CVE-2025-32463-Sudo-Chroot-Escape Descripción Este repositorio contiene una Prueba de Concepto PoC basada en Python para CVE-2025-32463, una vulnerabilidad de escalada de privilegios local en las versiones de sudo 1.9.14 a 1.9.17. Cuando un usuario tiene privilegios de sudo para ejecutar un coman...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Sudo Privilege Escalation A privilege escalation vulnerability exists in sudo affecting Linux/Unix-based systems. The flaw arises due to improper path validation when sudo is used with the -R --chroot option, allowing attackers to escalate to root via malicious NSS library loadin...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...

CVE-2025-32463-POC

CVE-2025-32463 - sudo Local Privilege Escalation PoC ⚠️ This repository contains a Proof of Concept PoC exploit for CVE-2025-32463 Intended only for educational purposes and use in authorized environments. 🧠 About the Vulnerability CVE-2025-32463 is a local privilege escalation vulnerability...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...

CVE-2025-32463

CVE-2025-32463 - Sudo Privilege Escalation PoC /////// Disclaimer ///////////////////////////////////////////////////////////////////////////////////////////////////////////////// This project is provided solely for educational purposes. By using any part of this repository, you acknowledge that...

CVE-2025-32463_exploit

CVE-2025-32463 — sudo "chwoot" chroot Local Privilege Escalation Local privilege escalation to root in sudo via the --chroot -R option. Works for any local user , including accounts with no sudoers entry at all e.g. www-data. sudo 1.9.14 – 1.9.17 chroots into the user-supplied directory while the...