CVE-2021-3560 PoC — polkit 代码问题漏洞

Description

Exploitation Script for CVE-2021-3560

介绍

# CVE-2021-3560 Exploit Script

This script exploits CVE-2021-3560, a vulnerability in polkit that allows privilege escalation to root.

## Usage

After cloning the repository, grant execution permissions and run the script:

```bash
chmod +x exploit.sh
./exploit.sh
```

## Expected Outcome

After running the script, a new user will be created with root privileges. You can log in using the credentials specified in the script:

```
ROOT_USER="john"
ROOT_PASS="john@123"
```

### Example Login

```bash
su john
Password: john@123
sudo su
whoami
root
```

## Disclaimer

This exploit is provided for educational purposes only. Use it responsibly and only on systems you have explicit permission to test. Unauthorized access to systems is illegal and punishable under law.

## References

- [CVE-2021-3560 Details](https://nvd.nist.gov/vuln/detail/CVE-2021-3560)
- [Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug](https://github.blog/security/vulnerability-research/privilege-escalation-polkit-root-on-linux-with-bug/)

文件快照

备注