Sploitus

Exploit for Improper Privilege Management in Sudo Project Sudo

githubexploit Β· 2023-01-21

Exploit Code

README14 lines
## https://sploitus.com/exploit?id=A33E7443-CCD5-5E1F-9280-747590814234
# CVE-2023-22809

## sudo Privilege escalation

Affected sudo versions: 1.8.0 to 1.9.12p1 

This script automates the exploitation of the CVE-2023-22809 vulnerability to 
gain a root shell. 

The script checks if the current user has access to run the `sudoedit` or 
`sudo -e` command for some file with root privileges. If it does it opens the 
sudoers file for the attacker to introduce the privilege escalation policy 
for the current user and get a root shell.