Chocapikk/CVE-2025-32463-lab

GitHubRepository PoC

PoC files

3 files

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub

Docker lab environments

1
GitHub

docker-compose.yml

Created Vuln labCVE-2025-32463Compose · builds

1 Compose manifest · 1 Dockerfile · 1 service

Analysisdeepseek-v4-pro:cloud ·

Environment assessment

A single-service Docker Compose environment that builds an Ubuntu 24.04 container running OpenSSH server and a specific version of sudo (1.9.16p2). The README associates it with CVE-2025-32463 and provides a command to connect via pwncat.

docker-compose.yml:1-5Dockerfile:1-24README.md:1-10

Lab assessment

Vulnerability lab

The repository name and README explicitly reference CVE-2025-32463, and the Dockerfile installs a specific sudo version (1.9.16p2) alongside an SSH server, creating a controlled environment for vulnerability research or exploitation.

README.md:1Dockerfile:9-13
Lab shapeCompose · builds
Services1
Compose manifests1
Dockerfiles1
Evidence & reasoningComponents · CVE assessment · exercise context · review boundaries
Components

Services and files described by the evidence

ssh-lab

SSH serversudo target

A service built from the local Dockerfile that runs OpenSSH server on port 22 (mapped to host port 2222) and includes sudo 1.9.16p2. A user 'pwn' with password 'pwn' is created for SSH access.

docker-compose.yml:2-5Dockerfile:1-24
CVE assessment

How the supplied evidence relates each vulnerability

CVE-2025-32463

Insufficient evidence

The README and repository name claim association with CVE-2025-32463, but no exploit code, vulnerability details, or configuration specific to the CVE is visible in the supplied evidence. The installed sudo version (1.9.16p2) may be relevant, but the connection cannot be confirmed from the packet alone.

README.md:1Dockerfile:9-13
Exercise context

Requirements and sequence described by the evidence

Prerequisites

  • Docker and Docker Compose must be installed to build and run the environment.README.md:5-6
  • The tool 'pwncat-vl' (likely pwncat-cs) is required to connect to the SSH service as shown in the README.README.md:6

Evidence-described exercise path

  1. Run 'docker-compose up' to build and start the SSH service.README.md:5-6
  2. Connect to the SSH service as user 'pwn' on localhost port 2222 using pwncat-vl.README.md:6
Safety-review evidence

Behaviors behind the stored safety assessment

No harmful behavior observed

The environment exposes only an SSH server on a mapped port and installs a specific sudo version. No hidden or unnecessary host escape, persistence, credential theft, or external connectivity is visible. The port mapping and user creation are consistent with a vulnerability lab.

docker-compose.yml:1-5Dockerfile:1-24
Review boundaries

What the analysis did not establish

  • No exploit or vulnerability details are provided; the CVE association is based solely on the repository name and README title.
  • The behavior of the 'pwncat-vl' command and any subsequent exploitation steps are not included in the evidence.
  • The specific vulnerability in sudo 1.9.16p2 is not described or demonstrated in the supplied files.
Model interpretation

This review is limited to the supplied lab evidence packet. It does not assert that the environment runs, reproduces a vulnerability, or is safe to execute. Contract: eip-docker-lab-analysis-v1.

Linked vulnerabilities

1