Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2025-32463 PoC — Sudo 安全漏洞

Source
Associated Vulnerability
Title:Sudo 安全漏洞 (CVE-2025-32463)
Description:Sudo是一款使用于类Unix系统的,允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.9.17p1之前版本存在安全漏洞,该漏洞源于使用用户控制目录中的/etc/nsswitch.conf可能导致获取root访问权限。
Description
This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving `chroot` behavior in affected `sudo` versions (1.9.14 through 1.9.17)
Readme
# CVE-2025-32463 — Sudo 1.9.14 → 1.9.17 Local Privilege Escalation via `chroot`

**Exploit script** demonstrating a local privilege escalation affecting certain Sudo 1.9.x releases (CVE-2025-32463).

- **Exploit reference:** https://www.exploit-db.com/exploits/52352  
- **Tested on:** Ubuntu 24.04.2 LTS with `sudo` 1.9.16p2

---

## Summary

This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving `chroot` behavior in affected `sudo` versions (1.9.14 through 1.9.17). Use this repository only for defensive research, patch validation, or authorized penetration testing on systems you own or have explicit permission to test.

---

## IMPORTANT — Legal & Safety Notice

This code is potentially dangerous. Do not run it on systems for which you do not have explicit authorization. Misuse may be illegal and/or cause data loss. By using the contents of this repository you agree that you are responsible for any consequences. If you are testing, do so in an isolated lab or VM snapshot you can restore.

If you discover this vulnerability in a production environment, follow responsible disclosure best practices: contact the vendor or the maintainers and give them time to respond before public exploitation.

---

## Prerequisites

- A vulnerable `sudo` version (e.g., 1.9.14 → 1.9.17). Verify local `sudo` version before testing.
- A Linux system where you have a local account (the exploit is for local privilege escalation).
- Recommended: test inside a VM or container and have snapshots or backups.

---

## Quick Usage

```bash
# clone the repo
git clone https://github.com/r3dBust3r/CVE-2025-32463.git
cd CVE-2025-32463

# make the exploit script executable
chmod +x ./CVE-2025-32463

# run the exploit (only on authorized/test systems)
./CVE-2025-32463
File Snapshot

[4.0K] /data/pocs/072fc16c1943aa7522b1d997458fa95f6ede5d47 ├── [1.3K] CVE-2025-32463 ├── [1.0K] LICENSE └── [1.8K] README.md 1 directory, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.