cve-2025-32463-lab

CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab This repository contains a Docker-based lab and proof-of-concept exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 to 1.9.17. 🚨 Disclaimer This code is for educational and authorized testing...

CVE-2021-3156

exploit.py Forked from @worawit, shorter&optimized. Only works for sudo=1.8.23 on Centos7 Works on both the web server and linux machines backdoor.php php backdoor generated through weevely, password: "H@rmWsH4rE!". Gives access to an ssh session as Apache if sucessfully uploaded to the server...

CVE-2025-32463

CVE-2025-32463 - Sudo Chroot Privilege Escalation Exploit Overview CVE-2025-32463 is a critical local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. This vulnerability allows attackers with sudo privileges to escalate to root access by exploiting a design flaw in the...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

CVE-2025-32463

Vulnerable: sudo 1.9.14 to 1.9.17 Patched: sudo 1.9.17p1 and later Exploit git clone https://github.com/kh4sh3i/CVE-2025-32463.git cd CVE-2025-32463 chmod +x exploit.sh id ./exploit.sh id...

CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS Library Hijack | v0.0.4 Author: 0xb0rn3 | 0xbv1 Type: Proof of Concept PoC Security Research Tool CVE: CVE-2023-42456 Technique: sudo -R chroot NSS library injection → privilege escalation to root ⚠️ Disclaimer This tool is developed for authorized penetration testing and...

Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462

⚠️ CVE‑2025‑32463 & CVE‑2025‑32462 – Sudo Privilege Escalation Flaws in Linux 🧠 TL;DR In July 2025, two newly disclosed vulnerabilities in the sudo utility—CVE-2025-32463 and CVE-2025-32462 —have put numerous Linux distributions at risk. The more severe of the two, CVE‑2025‑32463 , carries a CVSS...

CVE-2025-32463_POC

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. Contents File| Purpose ---|--- Dockerfile| Builds an Ubuntu 24.04 image with vulnerable sudo 1.9.16p2 and...

CVE-2021-3156

CVE-2021-3156 Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability See report » Francesco Marchiori · Alessandro Lotto Table of Contents 1. Abstract 2. Visualization 3. Fuzzing 4. Exploit 5. Patch 🧩 Abstract Any Unix-based Operating System is equipped with the sudo command tha...

CVE-2021-3156-plus

CVE-2021-3156 This is a warehouse modification based on @CptGibbon and supports arbitrary command execution. 相关阅读：CVE-2021-3156 - Exploit修改 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on : @CptGibbon Ubuntu 20.04 against sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 Al...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Heap-Based Buffer Overflow in sudo | Exploitation & Mitigation Analysis Overview CVE-2021-3156, known as Baron Samedit , is a heap-based buffer overflow vulnerability in the sudo program. It allows any unprivileged local user to gain root privileges on vulnerable...

CVE-2025-32463

Vulnerability Overview CVE-2025-32463 affects Sudo versions 1.9.14 through 1.9.16 fixed in 1.9.17p1. When Sudo is invoked with the --chroot option, it may load configuration from an attacker-controlled path, leading to arbitrary code execution and privilege escalation to root. Usage: python3...

SUDO-privilege-escalation

SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...

CVE-2025-32463

CVE-2025-32463 Sudo chroot Elevation of Privilege Affects Sudo versions 1.9.14 to 1.9.17. CVE-2025-32463 was introduced in Sudo v1.9.14 June 2023 with the update to the command matching handling code when the chroot feature is used...

CVE-2021-3156

CVE-2021-3156 checking CVE-2021-3156 vulnerability & patching script CVE-2021-3156 description: Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character. To check for...

CVE-2021-3156

Exploit CVE-2021-3156 Executing: $ git clone https://github.com/RodricBr/CVE-2021-3156 $ cd CVE-2021-3156/ $ chmod u+x programa.sh $ ./programa.sh One-Liner: AA=$sudo --version | tr ':space:' ','| tr -d '.' | cut -d ',' -f3 | awk 'print $0'; "$AA" -lt 1828 && echo -e "Exploitável\nCVE-2021-3156";...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 and CVE-2025-34323 Nagios Log Server Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server, along with a combined script to return a shell as root. CVE-2025-34322 After auth, replace your session ID into these two curl commands. The first one set the...

sudo-chroot-CVE-2025-32463

DISCLAIMER This code is for educational and research purposes only. Do not use it on systems you do not own or have permission to test. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this code. sudo chroot PrivEsc PoC CVE-2025-32463 This is a...

CVE-2019-14287-demo

CVE-2019-14287 Demo Container This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. This container can be run with: docker run -ti cashwilliams/cve-2019-14287-demo Configuration...

CVE-2025-32463-Sudo-Chroot-Escape

CVE-2025-32463-Sudo-Chroot-Escape Description This repository contains a Python-based Proof of Concept PoC for CVE-2025-32463, a local privilege escalation vulnerability in the sudo versions 1.9.14 through 1.9.17. When a user has sudo privileges to run a command within a chroot environment -R fla...