CVE-2025-32463_sudo_chwoot

Declaration: This script is only for security testing and should not be used for illegal purposes.

CVE-2025-32463 sudo_chwoot privilege escalation vulnerability verification script

Description

Compared to other POCs available on the Internet, this script takes into account that some hosts may not have gcc installed and lack a compilation environment. Therefore, this script is compatible with two scenarios:

• If the host has gcc installed, the script will automatically compile the binary file and escalate privileges.
• If the host does not have gcc installed, the script will call the pre-compiled binary file to escalate privileges.

Usage

To verify if the vulnerability exists:

sudo -R woot woot

If the vulnerability exists, the result will be:

sudo: woot: No such file or directory

If the vulnerability does not exist, the result will be:

sudo: you are not permitted to use the -R option with woot

If the vulnerability exists, use the POC to escalate privileges:

git clone https://github.com/Yuy0ung/CVE-2025-32463_chwoot.git 
cd CVE-2025-32463_chwoot
chmod +x ./exp.sh
./exp.sh

File List

The content of the files is as follows:

• README.md: README file
• exp.sh: POC script
• woot1337.so.2: Pre-compiled binary file