Sploitus

Exploit for Off-by-one Error in Sudo Project Sudo

gitee Β· 2021-03-18

Exploit Code

MARKDOWN2 lines
## https://sploitus.com/exploit?id=7AF0850A-9167-5CE2-81B8-A6A710794698
This is a PoC exploit for CVE-2021-3156, a heap-based overflow vulnerability in sudo. The exploit is written in C and uses a combination of techniques to achieve arbitrary code execution. The exploit creates a shared library (libnss_X/P0P_SH3LLZ_ .so.2) that is loaded by sudo, which contains a buffer overflow vulnerability. The exploit then uses this vulnerability to inject malicious code into the heap, allowing it to execute arbitrary commands with elevated privileges. The exploit is designed to be used in a single-shot manner, without modifying system files. The usage of the exploit is described in the README.md file, which includes instructions on how to build and run the exploit. The exploit has been tested on Linux systems and has been shown to be effective in achieving arbitrary code execution.