Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2023-22809 PoC — Sudo 安全漏洞

Source
Associated Vulnerability
Title: Sudo 安全漏洞 (CVE-2023-22809)
Description:In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.
Description
Sudo Privilege Escalation: CVE-2023-22809 Simulation  This project simulates the Sudo privilege escalation vulnerability (CVE-2023-22809) to demonstrate how unauthorized root access can be gained. It involves identifying and exploiting this vulnerability in a controlled environment using Parrot OS, the Sudo command, and Bash scripting.
Readme
# SUDO Privilege Escalation
**Overview:**
This project demonstrates the exploitation of the Sudo privilege escalation vulnerability (CVE-2023-22809). The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment.

**Technologies Used:**
**Operating Systems:** Parrot OS, Ubuntu
**Tools:** Sudo command, Bash scripting
**Environment:** Virtualized environment for safe testing and execution

**Steps Involved**
**Manual Attack Simulation:** First, manually simulated the vulnerability to understand its mechanics and potential impact.
**Exploit Development:** Developed a Bash script to automate the exploitation process.
**Execution:** Ran the automated script in a safe, virtualized environment to confirm the effectiveness of the exploit.
**Mitigation:** Identified and applied countermeasures to secure the system against this vulnerability.
**Documentation:** Provided detailed guidance on the attack process, automation, and mitigation strategies.

**Files Included**
**Learning Objective SUDO Privilege Escalation in LINUX:** Outlines the learning goals and objectives for understanding Sudo privilege escalation in Linux environments.
**Lab Manual SUDO Privilege Escalation in LINUX:** Provides detailed instructions for the hands-on lab simulation, including attack procedures and prevention techniques.
**Automation Script (Bash) SUDO Privilege Escalation in LINUX:** Contains the Bash script used to automate the exploitation process.
**SUDO Privilege Escalation in LINUX (PowerPoint Presentation):** Summarizes the project, including the attack simulation, automation script, and findings.

**How to Use**
Download and review the **Learning Objective** and **Lab Manual** documents for context, instructions, and prevention techniques.
Execute the **Automation Script** in a Linux environment to simulate the privilege escalation.
View the **PowerPoint Presentation** for a summary and educational overview of the project.

**Disclaimer
This project is intended for educational purposes only. Unauthorized use of this code in real-world systems is illegal and unethical.**
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →