Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-22809 PoC — Sudo 安全漏洞

Source
Associated Vulnerability
Title:Sudo 安全漏洞 (CVE-2023-22809)
Description:Sudo是一款使用于类Unix系统的,允许用户通过安全的方式使用特殊的权限执行命令的程序。 1.9.12p2 之前的 Sudo存在安全漏洞,该漏洞源于sudoedit(又名 -e)功能错误处理用户提供的环境变量(SUDO_EDITOR、VISUAL 和 EDITOR)中传递的额外参数,从而允许本地攻击者将任意条目附加到要处理的文件列表中 . 这可能导致特权升级。
Description
A script to automate privilege escalation with CVE-2023-22809 vulnerability
Readme
# CVE-2023-22809

## sudo Privilege escalation

Affected sudo versions: 1.8.0 to 1.9.12p1 

This script automates the exploitation of the CVE-2023-22809 vulnerability to 
gain a root shell. 

The script checks if the current user has access to run the `sudoedit` or 
`sudo -e` command for some file with root privileges. If it does it opens the 
sudoers file for the attacker to introduce the privilege escalation policy 
for the current user and get a root shell.
File Snapshot

[4.0K] /data/pocs/3a41db9ea4a20270fe7acc33003c4ca63a67b242 ├── [1.4K] exploit.sh └── [ 465] README.md 0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.