kikechans/-netdata-privesc-cve-2024-32019🔓 Local Privilege Escalation (ndsudo) en Netdata CVE-2024-32019. Explotación de configuraciones débiles. 🛡️
Automated Bash script to exploit the PATH Hijacking vulnerability in Netdata's SUID ndsudo binary (CVE-2024-32019). This exploit was specifically adapted to overcome common restrictions found in hardened environments (such as the Editor machine from Hack The Box).
This repository and the included scripts are provided strictly for educational and cybersecurity research purposes. The author is not responsible for any misuse or damage that may result from the use of this material. This script is designed for use in controlled laboratory environments (such as CTF platforms) or on systems where explicit owner consent has been obtained. Using this tool to attack targets without prior mutual consent is illegal and punishable by law.
nosuid Evasion: The payload generates the privileged shell in the /home/user directory instead of /tmp to avoid mount restrictions.#!/bin/bash -p to force Bash to preserve the euid=0 inherited from the SUID binary./root/root.txt) granting read permissions to the current user.Create the auto_privesc.sh file on the victim machine and give it execution permissions:
chmod +x auto_privesc.sh
./auto_privesc.sh