sudo-nopasswd: Sudo NOPASSWD - Privilege Escalation

日期: 2025-08-01 | 影响软件: sudo | POC: 已公开

漏洞描述

Sudo configuration might allow a user to execute some command with another user's privileges without knowing the password.

PoC代码[已公开]

id: sudo-nopasswd

info:
  name: Sudo NOPASSWD - Privilege Escalation
  author: daffainfo
  severity: high
  description: Sudo configuration might allow a user to execute some command with another user's privileges without knowing the password.
  reference:
    - https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#nopasswd
  metadata:
    verified: true
  tags: code,linux,sudo,privesc,local

self-contained: true
code:
  - engine:
      - sh
      - bash
    source: |
        sudo -l

    matchers:
      - type: word
        part: code_1_response
        words:
          - "(root) NOPASSWD:"
# digest: 4b0a00483046022100fc332830334e18132f3b3ba33a57c0d646f7b4ec9fb6a83849c70aa877efffe2022100c780fc0fccad8542da4cca4eaa21c354115cb95d6c3fa910fb5ce6c55821d829:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/code/privilege-escalation/linux/sudo-nopasswd.yaml

相关漏洞推荐