traitor
traitor copied to clipboard
sudo: wheel NOPASSWD false positive
Hello, I have sudo with permissive line:
%wheel ALL=(ALL) NOPASSWD: ALL
traitor reports false positive on all vulnerable test cases, and even pops a shell. But it can't exploit anything if the line is removed.
Could make sense to test from a non administrator account not belonging to the wheel group.