CVE-2025-32463 Sudo EoP Exploit PoC (Rust)

Using Prebuild Binary

1. Clone the repository and run the binary in the target machine.

git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git

cd CVE-2025-32463-Chwoot-POC

./exploit

Build From Source

1. Clone the repository (if not done already)

git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git
cd CVE-2025-32463-Chwoot-POC

2. Build the Rust binary in release mode

cargo build --release

The compiled binary will be located at:

./target/release/CVE-2025-32463-Chwoot-POC

Usage

Run the exploit binary with optional command arguments:

• To spawn an interactive root shell:

sudo ./target/release/CVE-2025-32463-Chwoot-POC

• To run a specific command as root (for example, id):

sudo ./target/release/CVE-2025-32463-Chwoot-POC "id"

Docker Usage

Alternatively, use the provided Docker container for an isolated vulnerable environment with all dependencies installed.

1. Build the Docker image

docker build -t sudo-chwoot .

2. Run the container interactively (if it didnt work , then try using the image id instead of sudo-chwoot. You can get thata using sudo docker images)

docker run --rm -it --privileged sudo-chwoot 

3. Inside the container, run the exploit

cd /home/pwn/CVE-2025-32463-Rust-POC
./target/release/CVE-2025-32463-Chwoot-POC