> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/redteam/privilege-escalation/linux/sudo-exploits.md).

# Sudo Exploits

## Tools

{% tabs %}
{% tab title="Sudo\_Killer" %}
An automated tools to detect sudo vulnerabilities and misconfigurations is [SUDO\_KILLER](https://github.com/TH3xACE/SUDO_KILLER)

We can directly run `sudo_killer` on the target.

```bash
./sudo_killer.sh -c -e -r report.txt -p /tmp
```

Alternatively, run it in **offline mode**. send `extract.sh` on victim machine. Copy the output from /tmp/sk\_offline.txt to your host and run `sudo_killer` in offline mode

```bash
./sudo_killer.sh -c -i /path/sk_offline.txt
```

{% endtab %}

{% tab title="FallOfSudo" %}
[FallOfSudo](https://github.com/CyberOne-TeamARES/FallOfSudo) is a tool that aid in the exploitation of Linux sudo rules. We can run it directly on the target machine

```bash
#On the target - Informational mode
$ python fallofsudo.py -i

#On the target - AutoPwn mode
$ python fallofsudo.py -a
```

{% endtab %}
{% endtabs %}