CVE-2024-28085

This PoC exploits CVE-2024-28085, a vulnerability in the util-linux `wall` command that fails to filter escape sequences, allowing unprivileged users to inject arbitrary text into other users' terminals. The exploit leverages this to create a fake sudo prompt and harvest passwords via process monitoring.

The repository claims to be a PoC for CVE-2024-2805 but is actually a trojan that steals sudo passwords by manipulating terminal escape sequences and exfiltrating credentials to a remote server. It disguises itself as a legitimate exploit but functions as malware.