Sudo Exploits

An automated tools to detect sudo vulnerabilities and misconfigurations is SUDO_KILLER

We can directly run sudo_killer on the target.

./sudo_killer.sh -c -e -r report.txt -p /tmp

Alternatively, run it in offline mode. send extract.sh on victim machine. Copy the output from /tmp/sk_offline.txt to your host and run sudo_killer in offline mode

./sudo_killer.sh -c -i /path/sk_offline.txt