Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2025-32463 PoC — Sudo 安全漏洞

Source
Associated Vulnerability
Title:Sudo 安全漏洞 (CVE-2025-32463)
Description:Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Description
This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving `chroot` behavior in affected `sudo` versions (1.9.14 through 1.9.17)
Readme
# CVE-2025-32463 — Sudo 1.9.14 → 1.9.17 Local Privilege Escalation via `chroot`

**Exploit script** demonstrating a local privilege escalation affecting certain Sudo 1.9.x releases (CVE-2025-32463).

- **Exploit reference:** https://www.exploit-db.com/exploits/52352  
- **Tested on:** Ubuntu 24.04.2 LTS with `sudo` 1.9.16p2

---

## Summary

This repository contains an exploit script for CVE-2025-32463, a local privilege escalation involving `chroot` behavior in affected `sudo` versions (1.9.14 through 1.9.17). Use this repository only for defensive research, patch validation, or authorized penetration testing on systems you own or have explicit permission to test.

---

## IMPORTANT — Legal & Safety Notice

This code is potentially dangerous. Do not run it on systems for which you do not have explicit authorization. Misuse may be illegal and/or cause data loss. By using the contents of this repository you agree that you are responsible for any consequences. If you are testing, do so in an isolated lab or VM snapshot you can restore.

If you discover this vulnerability in a production environment, follow responsible disclosure best practices: contact the vendor or the maintainers and give them time to respond before public exploitation.

---

## Prerequisites

- A vulnerable `sudo` version (e.g., 1.9.14 → 1.9.17). Verify local `sudo` version before testing.
- A Linux system where you have a local account (the exploit is for local privilege escalation).
- Recommended: test inside a VM or container and have snapshots or backups.

---

## Quick Usage

```bash
# clone the repo
git clone https://github.com/r3dBust3r/CVE-2025-32463.git
cd CVE-2025-32463

# make the exploit script executable
chmod +x ./CVE-2025-32463

# run the exploit (only on authorized/test systems)
./CVE-2025-32463
File Snapshot

[4.0K] /data/pocs/072fc16c1943aa7522b1d997458fa95f6ede5d47 ├── [1.3K] CVE-2025-32463 ├── [1.0K] LICENSE └── [1.8K] README.md 1 directory, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →