
CVE-2019-18634 に対する私の n-day エクスプロイト(ローカル権限昇格)
https://docs.google.com/presentation/d/11DpUy9Ll_HeuPRSgzaTARHPwlq01v_yyqbnJURlG9Ss/edit?usp=sharing
sudo visudo
次の行を
Defaults env_reset
次のように変更する
Defaults env_reset,pwfeedback
git clone https://github.com/sudo-project/sudo
cd sudo
git fetch --all --tags
git checkout SUDO_1_8_25
sudo apt-get update
sudo apt-get install python3 python3-pip python3-dev git libssl-dev libffi-dev build-essential
sudo python3 -m pip install --upgrade pip
sudo python3 -m pip install --upgrade pwntools
./configure --prefix=/usr/local
make
sudo make install
git clone https://github.com/aesophor/CVE-2019-18634
cd CVE-2019-18634
./exploit.py