CVE-2021-3156 PoC — Sudo 缓冲区错误漏洞

Source

Associated Vulnerability

Description

Forked from @worawit, shorter&optimized. Only works for sudo=1.8.23 on Centos7

Readme

# exploit.py 
Forked from @worawit, shorter&optimized. Only works for sudo=1.8.23 on Centos7
Works on both the web server and linux machines

# backdoor.php
php backdoor generated through weevely, password: "H@rmW#sH4rE!". Gives access to an ssh session as Apache if sucessfully uploaded to the server

# shell.php%00.jpg
Null-Byte php file sanitization bypass

File Snapshot

 [4.0K]  /data/pocs/8da1c720cf12f5fce71014df83ddf1061da78337
├── [ 754]  backdoor.php
├── [9.6K]  exploit.py
├── [ 361]  README.md
└── [  32]  shell.php%00.jpg

0 directories, 4 files

Remarks