CVE-2025-32463 PoC — Sudo 安全漏洞

Source

https://github.com/Chocapikk/CVE-2025-32463-lab

Associated Vulnerability

Title:Sudo 安全漏洞 (CVE-2025-32463)
Description:Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Readme

# CVE-2025-32463-lab

## Run lab

```bash
docker-compose up
pwncat-vl pwn@localhost -p 2222
```

![image](https://github.com/user-attachments/assets/508726d5-2c24-405a-a7a4-56aa9949f680)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →