liveoverflow/pwneditCVE-2021-3156 - Sudo Baron Samedit
CVE-2021-3156 - Sudo Baron Samedit
Before heading into the technical details, you can watch a brief summary here: https://www.youtube.com/watch?v=TLa2VqcGGEQ
Install Docker and make sure it is running with docker ps.
Each episode folder contains files and code snippets used in the video. Most important is the Dockerfile, which can be used to run an isolated system vulnerable to the sudoedit vulnerability.
If you want to betetr understand how docker works, checkout these videos:
This project uses a Makefile in each episode, to easier work with docker. You can build and run a particular episode's docker container with thes follwing commands.
cd episode01
sudo make
To get a root shell you can then run
sudo make root
Or be a regular user
sudo make attach
Feel free to check the Makefile and execute the docker commands directly.