CVE-2021-4034 PoC — polkit 缓冲区错误漏洞

Source

Associated Vulnerability

Description

Exploit for the PwnKit vulnerability, CVE-2021-4034, written in Go

Readme

### Pwnkit-go

This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go

Give it a try:

```sh
# create a vulnerable vagrant machine
$ make vm
...

# build the binary and scp it to the vagrant box
$ make scp

# ssh onto the vagrant box
$ make ssh

# The default user is "vagrant"
vagrant@ubuntu-focal:~$ whoami
vagrant

# execute exploit
vagrant@ubuntu-focal:/tmp$ cd /tmp && ./pwnkit-go
$ whoami
root
```

File Snapshot

 [4.0K]  /data/pocs/488ad78056fb514f1218de88534cd1887a3c13c5
├── [  43]  go.mod
├── [1.0K]  LICENSE
├── [ 578]  Makefile
├── [2.0M]  pwnkit-go
├── [2.4K]  pwnkit.go
├── [ 434]  README.md
├── [ 181]  Vagrantfile
└── [  52]  vm-config.sh

0 directories, 8 files

Remarks