CVE-2022-1329 🦠

Project developed by Agustín Sánchez Martín and Enrique Sánchez-Migallón Ochoa for the subject of Security in Computer Systems taught by Sebastián Reyes Ávila at the Higher School of Computer Science of Ciudad Real.

This project contains the documentation and steps necessary to exploit the vulnerability CVE-2022-1329 in an environment where WordPress has previously been installed on an Ubuntu 20.04 machine. Additionally, it includes instructions to change the machine's Kernel version to 5.9.12 in order to take advantage of the Dirty Pipe vulnerability (CVE-2022-0847) and thus escalate privileges on the system.

Contents:

• Installation and configuration of WordPress on Ubuntu 20.04.
• Changing the Kernel version to 5.9.12, which is vulnerable to "Dirty Pipe".
• Exploitation of CVE-2022-1329 in WordPress.
• Using the Dirty Pipe vulnerability to escalate privileges on the machine.

Prerequisites

Before starting, make sure you meet the following requirements:

• Ubuntu 20.04 installed on the victim machine.
• Administrator access to the machine to change the Kernel.
• Internet connection to download packages and update the system.
• Permissions to install and configure WordPress.