Sudo Exploit for (old) Ubuntu 20.04 LTS

This is the end. We finally develop a working sudoedit exploit for Ubuntu 20.04.

Episode 17:
00:00 - Intro
00:42 - Ubuntu VM Setup
02:09 - Fuzzing sudoedit
02:51 - Revisiting an Old Issue
04:11 - Exploring _tsearch Crashes
06:49 - Creating PoC Exploit
08:22 - Minimize and Testing Exploit
09:06 - Fuzzing Statistics
10:48 - Conclusion
11:52 - Outro

-=[ ❤️ Support ]=-

-=[ 🐕 Social ]=-

[LiveOverflow]

Sorry, of course this issue is patched in latest Ubuntu release. I was using an older Ubuntu 20.04 LTS version which still had a vulnerable sudo version. This video is about last year CVE-2021-3156.

[Ashhhleyyy]

This series was really interesting to watch, even though I don't really do binary exploitation or reverse engineering, it was a wonderful look inside this world, with the amount of effort and time required to research and develop something like this. Very well done on finally reaching the end!

[toolbgtools]

just completed watching. outstanding series, learned so much. Thank you for sharing this quality content for free.

[nikoshalk]

Thank you for the sudo video series! I followed along and used your videos as guidance and a way to nudge me in the correct direction. My goal was to learn more about fuzzing. And the journey was worth it!

[berndeckenfels]

That was a great series! (Now imagine you initially embarged on this journey without knowing there is a feasible exploit…)

[kevinwydler]

Just rewatched the whole series, what an inspiration! I could literally feel the joy with each successful step along this ride :)

[bigbadbrand]

thank you for this awesome series, I have learned so much from your channel! Keep up the great work.

[logiciananimal]

Congratulations, well done! You have more patience than I; I learned a lot from these videos.

[hanksmith]

That was awesome! I ended up binging the entire series in one viewing!

[dhiyaulhaqarif]

THIS SERIES JUST AMAZINGGG, please make more videos like this 😭👍👍👍

[Frakenstien]

I'm just getting into cybersecurity stuff, and binary exploitation and reverse engineering aren't my strong suits but they're the things that interest me the most. And this whole playlist helped me get more experience in that. Thank you for making these videos

[ltkim]

I really appreciate making a series like this! Especially considering these types of videos don't necessarily generate the most clicks

[WinningEmpire]

Thank you for these videos, I feel like every YouTube tutorial nowadays is aimed at beginners, so this is really refreshing!

[TheJobCompany]

absolutely loved this series, couldn't have expected anything less from you, keep it up

[cotranzbb]

One of the greatest series on the channel!

[buildnsell]

This series is soooo great, learned a lot.

[InfernalOdn]

congrats on success. Thanks for documenting you're journey. The next time someone tells me hacking is easy, I have somewhere to point them.

[anion]

Great. Really great! Thank you for this videos. I think we all learned so many things from your work and explanations, this is very valuable!

[AlexBMJ]

What a journey! Really enjoyed this series :)

[tanchienhao]

amazing series!! all this just goes over my head for now but I will certainly revisit it when i become better :) thank you for making these amazing educational resources completely free!