CVE-2021-3560 PoC — polkit 代码问题漏洞

Source

https://github.com/f4T1H21/CVE-2021-3560-Polkit-DBus

Associated Vulnerability

Title:polkit 代码问题漏洞 (CVE-2021-3560)
Description:It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Description

f4T1H's PoC script for CVE-2021-3560 Polkit D-Bus Privilege Escalation

Readme

# CVE-2021-3560-Polkit-DBus
Simple proof of concenpt script for CVE-2021-3560 Polkit D-Bus privilege escalation.<br>
For more information, see original blog post: https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/

## Usage
Try running the script again with a different (unregistered) username in case of a fail.<br>
```console
lowprivuser@machine:~$ ./poc.sh <username>
```

## PoC
![poc](poc.gif)

___─ Written by f4T1H ─___

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!