CVE-2025-32463 PoC — Sudo 安全漏洞

Description

Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒

Readme

# CVE-2025-32463: Local Privilege Escalation Exploit for Sudo

![CVE-2025-32463](https://img.shields.io/badge/CVE-2025--32463-red.svg) ![GitHub Release](https://img.shields.io/badge/Release-v1.0.0-blue.svg)

## Table of Contents

- [Overview](#overview)
- [Vulnerability Details](#vulnerability-details)
- [Affected Systems](#affected-systems)
- [Installation](#installation)
- [Usage](#usage)
- [Example](#example)
- [Contributing](#contributing)
- [License](#license)
- [Contact](#contact)

## Overview

This repository contains an exploit for the local privilege escalation vulnerability CVE-2025-32463. This vulnerability affects the `sudo` command, allowing users to gain elevated privileges on affected systems. 

You can download the necessary files from the [Releases section](https://github.com/yeremeu/CVE-2025-32463_chwoot/releases). 

## Vulnerability Details

CVE-2025-32463 is a vulnerability that arises from improper validation of user input in the `sudo` command. Attackers can exploit this flaw to execute commands with root privileges. 

### Key Points

- **Type**: Local Privilege Escalation
- **Severity**: High
- **CVSS Score**: 7.5 (High)
- **Attack Vector**: Local

Understanding the nature of this vulnerability is crucial for system administrators and security professionals. Proper mitigation strategies can prevent unauthorized access.

## Affected Systems

The following systems are affected by CVE-2025-32463:

- Ubuntu 20.04 LTS
- Debian 10
- CentOS 7
- Fedora 34

Ensure that your systems are updated to the latest patches to mitigate this vulnerability.

## Installation

To install the exploit, follow these steps:

1. Visit the [Releases section](https://github.com/yeremeu/CVE-2025-32463_chwoot/releases) to download the required files.
2. Extract the downloaded files using:

   ```bash
   tar -xvf CVE-2025-32463.tar.gz
   ```

3. Navigate to the extracted directory:

   ```bash
   cd CVE-2025-32463
   ```

4. Compile the exploit:

   ```bash
   gcc exploit.c -o exploit
   ```

5. Ensure you have the necessary permissions to run the exploit.

## Usage

After installation, you can run the exploit with the following command:

```bash
./exploit
```

This will execute the exploit and attempt to gain elevated privileges.

### Important Note

Use this exploit responsibly and only on systems you own or have explicit permission to test.

## Example

Here is a simple example of how to use the exploit:

1. Open your terminal.
2. Run the exploit:

   ```bash
   ./exploit
   ```

3. If successful, you will see a message indicating that you have gained root access.

## Contributing

We welcome contributions from the community. If you want to contribute, please follow these steps:

1. Fork the repository.
2. Create a new branch (`git checkout -b feature-branch`).
3. Make your changes.
4. Commit your changes (`git commit -m 'Add new feature'`).
5. Push to the branch (`git push origin feature-branch`).
6. Create a pull request.

## License

This project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.

## Contact

For questions or feedback, feel free to reach out:

- GitHub: [yeremeu](https://github.com/yeremeu)
- Email: yeremeu@example.com

Explore more about the exploit and keep an eye on the [Releases section](https://github.com/yeremeu/CVE-2025-32463_chwoot/releases) for updates.

File Snapshot

Remarks