CVE-2025-32463_chwoot

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. This vulnerability is reported by Rich Mirch @0xm1rch on X @ Stratascale. Original post: Vulnerability...

CVE-2021-3156

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on Ubuntu 20.04 against sudo 1.8.31 All research credit: Qualys Research Team Check out the details on their blog. You can check your version of sudo is vulnerable with: $ sudoedit -s Y. If it asks f...

CVE-2025-32463

CVE-2025-32463chwoot Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot...

CVE-2021-3156

CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...

Shocker-TJNULL-OSCP-

HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...

CVE-2023-22809-Exploiter

CVE-2023-22809 Exploiter Scripts Disclaimer This script is provided for educational purposes only. The author is not responsible for any misuse or unintended consequences resulting from its use. Always follow ethical guidelines and obtain proper authorization before testing any security tools or...

cve-2025-32463-lab

CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab This repository contains a Docker-based lab and proof-of-concept exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 to 1.9.17. 🚨 Disclaimer This code is for educational and authorized testing...

CVE-2025-32463

CVE-2025-32463 - Exploit de Escalada de Privilegios en Sudo Chroot Descripción General CVE-2025-32463 es una vulnerabilidad crítica de escalada local de privilegios en las versiones de sudo 1.9.14 a 1.9.17. Esta vulnerabilidad permite a los atacantes con privilegios de sudo escalar al acceso root...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

CVE-2025-32463

CVE-2025-32463 Sudo chroot Privilegieneskalation Betrifft Sudo-Versionen 1.9.14 bis 1.9.17. CVE-2025-32463 wurde in Sudo v1.9.14 Juni 2023 mit der Aktualisierung des Codes zur Behandlung des Befehlsabgleichs eingeführt, wenn die chroot-Funktion verwendet wird...

CVE-2021-3156

CVE-2021-3156 controllo della vulnerabilità CVE-2021-3156 e script di patch Descrizione di CVE-2021-3156: Sudo prima della versione 1.9.5p2 presenta un Heap-based Buffer Overflow, che consente l'escalation dei privilegi a root tramite "sudoedit -s" e un argomento da riga di comando che termina co...

CVE-2021-3156

Sfruttare CVE-2021-3156 Esecuzione: root@kitploit: $ git clone https://github.com/RodricBr/CVE-2021-3156 $ cd CVE-2021-3156/ $ chmod u+x programa.sh $ ./programa.sh Comando singolo: root@kitploit: AA=$sudo --version | tr ':space:' ','| tr -d '.' | cut -d ',' -f3 | awk 'print $0'; "$AA" -lt 1828 &...

AZL-98225 CVE-2026-82474 affecting package sudo 1.9.17-2

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...

SimpleCTF-THM-Walkthrough

SimpleCTF-THM-Relatory Primo CTF completato con successo! Questa repository documenta il mio walkthrough del Simple CTF di TryHackMe. Copre la ricognizione di rete Nmap, lo sfruttamento web CVE-2019-9053 e il cracking delle credenziali. Come sviluppatore, è stato fantastico passare da SQLi a una...

CVE-2026-82474

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. A local user with permission to run specific commands can execute denied programs by calling execveat directly or via fexecve , thereby bypassing both policy enforcement and au...

CVE-2026-82474

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...

EUVD-2026-68130

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...

CVE-2026-82474 Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...

sudo-chroot-CVE-2025-32463

DICHIARAZIONE DI NON RESPONSABILITÀ Questo codice è destinato esclusivamente a scopi educativi e di ricerca. Non utilizzarlo su sistemi di cui non sei proprietario o per cui non hai il permesso di test. L'autore non è responsabile per qualsiasi uso improprio, danno o conseguenza legale derivante...